CMEK Azure info (#559)

modules/ROOT/pages/platform/security/encryption.adoc

@@ -123,7 +123,11 @@ Move through the tabs to enable to following:
 * Purge protection
 * Azure role-based access control
 * Azure Disk Encryption for volume encryption
-* Allow access from all networks
+* When setting up the key vault, in Networking you can choose:
+** *Allow public access from all networks*
+** *Allow public access from specific virtual networks and IP addresses* (need to check *Allow trusted Microsoft services to bypass this firewall*)
+** *Disable public access* (need to check *Allow trusted Microsoft services to bypass this firewall*)
+** If you need to edit the public access setting after setting up the key vault, you will find public access options in Networking > Firewalls and Virtual Networks and below it is the Exception section the checkbox to Allow trusted Microsoft services to bypass this firewall.
 
 === Create a key