For an Azure Key Vault, is it possible that within a single keyvault different secrets are used to access different resources (yes/no)? If yes, how?

Question

For an Azure Key Vault, is it possible that within a single key vault different secrets are used to access different resources (yes/no)? If yes, how?

Answer 1

Hello @Yeap Jie Zhi Mark ,

Thanks for reaching out.

Yes, you can create many secrets in Single Azure Key Vault which can be used for different resources and there is no limit to the number of secrets in Key Vault.

Each objects in Azure Key Vault such as secret will have unique identifier and URL as shown below which can be used to access given secret for different resource.

Here are some example of how to retrieve a secret from Key Vault:
PowerShell
Azure Portal
REST API

In addition to that Objects stored in Key Vault (secrets) are versioned whenever a new instance of an object is created. Each version is assigned a unique identifier and URL.

The URL consists of a prefix that identifies the Key Vault, object type, user provided Object Name, and an Object Version.

For Vaults: https://{vault-name}.vault.azure.net/{object-type}/{object-name}/{object-version}

To learn more, read Azure Key Vault keys, secrets and certificates overview

Azure Key vault has some Service limits and Throttling guidance which you may want to consider for large environments and for designing secure applications heavily relying on Key vault operations.

Hope this helps.

Regards,
Siva Kumar Selvaraj

-----------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Thank you for the answer.