Client side encryption: ability to define a client encryption key using IaC

[tsbala]

Is your feature request related to a problem? Please describe.
We have a situation where we are not able to define a client encryption key on a container because the container has been created using Pulumi (IaC tool) and it is not possible for us to generate a client side encryption key using Azure REST API. The creation of Azure resource is managed by a different team and it is not possible to include Azure SDK calls to generate the client encryption key.

Describe the solution you'd like
Two possible solutions

• Allow patch on an existing container to add a client encryption key. Happy for the patch to fail if the container has data in it.
• Allow creation of client side encryption key using Azure REST API