Now in general availability Azure Key Vault automated key rotation. Schedule automated rotation from a rotation policy and set up expiry notifications using Event Grid.
Released to general availability in Azure SQL Database and Managed Instance is the ability to use an RSA key stored in Azure Key Vault Managed HSM, for customer-managed Transparent Data Encryption Bring Your Own Key (TDE BYOK).