Disk encryption sets are an Azure resource that lets you manage encryption keys centrally for your Azure managed disks. You can use customer-managed keys to encrypt managed disks, snapshots, and images with full control over the keys and the use of Azure Key Vault.