Key Vault integration or other solution so that the customer ownes the encryption key.
Details of how we secure data is described here:
Is there a specific thing related to encryption that you would like supported?
This is a requirement of my customer. As per Storage Accounts and SQL servers we require to own the encryption key, whether it is at a KEK or DEK level. Microsoft managed keys are not sufficient due to the customer's security standards.
Tomas Lugn commented
The basics are to meet regulatory requirements to keep data encrypted and prove control of encryption keys.