In the official documentation it is stated: Key Vault references are not presently able to resolve secrets stored in a key vault with network restrictions unless the app is hosted within an App Service Environment. We have Key Vault with network restrictions and we are able to use Key Vault references to secrets in it, in our Function Apps. We are not using App Service Environment, we use service endpoints. Is this fixed in the meantime and the documentation is not in sync? I am unable to find any official document that states that this restriction is no longer imposed.