Skip to content

Latest commit

 

History

History
55 lines (40 loc) · 1.37 KB

File metadata and controls

55 lines (40 loc) · 1.37 KB

Azure Key Vault

Centralized secrets, keys, and certificate management.

When to Use

  • Storing application secrets
  • Managing certificates
  • Storing encryption keys
  • Centralizing secret management
  • Enabling secret rotation

Required Supporting Resources

Resource Purpose
None required Key Vault is self-contained
Private Endpoint Secure access (optional)

SKU Selection

SKU Features
Standard Software-protected keys
Premium HSM-protected keys

RBAC Roles

Role Permissions
Key Vault Administrator Full access
Key Vault Secrets Officer Manage secrets
Key Vault Secrets User Read secrets
Key Vault Certificates Officer Manage certificates
Key Vault Crypto Officer Manage keys

Environment Variables

Variable Value
KEY_VAULT_URL https://{vault-name}.vault.azure.net/
KEY_VAULT_NAME Vault name

Best Practices

  1. Always use RBAC over access policies
  2. Enable soft delete and purge protection for production
  3. Use managed identities instead of storing keys in apps
  4. Set expiration dates on secrets
  5. Use separate vaults for different environments

References