Azure Vault Credential local Storage

Albertk 106 Reputation points
2020-08-06T05:26:31.547+00:00

Hi,

I am interested in the Azure Vault for storing credentials (eg DB login password, encryption key). I have the following questions

1) Where do I store the Azure access credential in my app (eg aspnet core ) ? Do I leave it in the clear in the appsettings.json ?

2) If I want to distribute my app to different organisation How do I manage the secrets on behalf. Some organisation just want a total outsource.

3) If someone decompile the app and gets the hold of the access credential, would't it be possible to get stored secret and also spam the azure vault with request so that I rack up transaction fees.

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,130 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vaibhav Chaudhari 38,616 Reputation points
    2020-08-06T08:46:17.183+00:00

    Please see if below documents help

    app-service-key-vault-references
    tutorial-net-create-vault-azure-web-app

    ===============================================

    If the response helped, do "Accept Answer" and upvote it -- Vaibhav