If you want to effectively protect your data in the cloud, you need to be aware of the different states in which data can occur, and what controls are available for that state. Azure data security encryption targets the following data states:

• Data at rest: This includes all containers, information storage objects, and types that exist statically on physical media, both magnetic and optical disk.
• Data in transit: Data is in transit when it is being transferred between programs, locations, or components. For instance, data can be transferred across a service bus, over the network (including hybrid connections, such as ExpressRoute), or during an input/output process.