I am working on implementing Microsoft Purview Service Encryption with Customer Key by using Key Vault. I want to activate the key vault firewall by enabling the Allow trusted Microsoft services to bypass this firewall exception. But I am not sure if the Data encryption policy might reach to the key in that case.

There isn’t much info on the documentation about the key vault firewall: https://learn.microsoft.com/en-us/purview/customer-key-overview .

Has anyone a previous experience on this issue?