question

SaurabhSharma-msft avatar image
0 Votes"
SaurabhSharma-msft asked ·

What is Management and Data plane in Azure Key Vault?

What is Management and Data plane in Azure Key Vault?


[Note: As we migrate from MSDN, this question has been posted by an Azure Cloud Engineer as a frequently asked question]

Source: Secure your key vault


azure-key-vault
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered ·

The Management plane interface is used for managing the Key Vault itself which includes operations like creating and deleting key vaults, retrieving key vault properties, and updating access policies.

The data plane is used for working with the data stored in a key vault and includes operations of add, delete, and modify keys, secrets, and certificates.

Access to a key Vault is controlled through these two planes and the applications access these planes through endpoints. Refer to Resource endpoints for details.

The Management plane access is provided through RBAC whereas access to a data plane is provided through Key Vault access policies.

Source: Secure your key vault


·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.