Software-protected master encryption keys are now available

The Vault service introduces the concept of a protection mode attribute for master encryption keys. Along with the introduction of this concept, the service now offers master encryption keys protected by software. Master encryption keys that are protected by software are free to create and use and are stored and processed on the server instead of a hardware security module (HSM). For more information, read about keys in Key and Secret Management Concepts.