azure disk encryption

In order to make sure the encryption dont cross regional boundaries, Azure Disk Encryption needs the Key Vault and the VMs to be co-located in the same region.

Create and use a Key Vault that is in the same region as the VM to be encrypted.

reference:

https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-overview