Secure your secrets with Azure Functions & KeyVault

Рет қаралды 8,536

2 жыл бұрын

This video walks you through the process to connect KeyVault to your Azure Function using Managed Identity. This can come in handy to secure credentials or other configuration data and remove it from your source code. The video also shows an example of calling the function where the function reads from the KeyVault and displays the value on the screen.

Пікірлер: 18

@srishtiganguly6000 Жыл бұрын

Thank you for sharing how to add secrets from our azure key vault into our azure functions. The process you demonstrated was easy to follow and worked without errors in the first go!

@conaxlearn8566 Жыл бұрын

Thank God for for you. This is exactly the information I am looking for! Very much appreciated!

@KaraboeLearning 16 күн бұрын

Thanks man this worked

@BunnyOfThunder Жыл бұрын

This was great, thank you

@DeepakShaw 7 ай бұрын

How do can you do this setting from the local machine during the debug?

@TheRbito 6 ай бұрын

I am wondering the same thing. I really like this approach but if I won't figure out if this can be used in the local machine the reality is that I probably can't use it.

@ivandariotrebilcockcaviede4006 Жыл бұрын

Thanks!

@camjocotem 3 ай бұрын

At 7:00 did you mean to do the Get and List on Secret permissions as opposed to Key permissions?

@uzoruchenna4863 Жыл бұрын

Thanks for this. I actually did something similar recently but mine was getting a certificate stored in key Vault in my function app

@conaxlearn8566 Жыл бұрын

Hello, at 8:52, why is it important to select Deployment Slot setting? I don't use deployment slots, do I still need to select it?

@siyabongamngomezulu3775 9 ай бұрын

Deployment slot settings are for deployment slots, otherwise a 'setting/environment variable' does not need to be a deployment slot settting.

@azureappmodernization9036 9 ай бұрын

@@siyabongamngomezulu3775 , I am not seeing it as a requirement in any of the docs. Sorry about the mis-statement in the video. Good catch @conaxlearn8566

@user-id6ir1jk1y Жыл бұрын

To define the timezone in Azure functions for Timer trigger, do we need to set up the environment variable as you did or at different location?

@azureappmodernization9036 9 ай бұрын

Sorry for the delayed response here: You should be able to set the timezone by defining WEBSITE_TIME_ZONE in your app settings. learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer?tabs=python-v2%2Cisolated-process%2Cnodejs-v4&pivots=programming-language-python#ncrontab-time-zones

@laserschondorf6065 9 ай бұрын

Thank you for the video. Can you secure an api key in key vault so only ie an android app can call the function?

@azureappmodernization9036 9 ай бұрын

If you put your key in the vault as a secret, you can grant a specific service principal access to the secret. Your android app can then use that particular service principal to access the secret ( and its value). There is nothing that limits the principal to only be used on Android, however. Did I understand your question correctly?

@laserschondorf6065 9 ай бұрын

@azureappmodernization9036 thank you so much for taking the time to reply. but how is this better than storing the secret key in the android app since you will need to store the service principals credentials in the app?