Questions tagged [azure-keyvault]
Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.
2,787
questions
1
vote
1
answer
29
views
Refereencing a key vault uri using resourceId how can the resource group be referenced in bicep
I have the bicep code module below which adds a customer managed key onto a storage account, the issue is that it expects the key vault to be in thesame resource group as the storage account which may ...
0
votes
1
answer
52
views
Trigger key rotation from keyvault key rotation policy using powershell
Having done some research on how to use the rotate now option programmatically for Azure key vault keys. I came up with the script below, but it doesn't appear to work. I was wondering if anyone knew ...
0
votes
0
answers
53
views
Logic App with Managed Identity that gets triggered when a new Azure KeyVault Secret is to Expire
I have managed to create a Logic App that can send an email once an Azure KeyVault secret is about to expire. This works with my own credentials, but I cannot make it work with Managed Identity api ...
0
votes
0
answers
62
views
Using Terraform Script have to get the credentials in Azure KeyVault like subscription id, client id, client secret
I Am trying to deploy Azure storage account using terraform but i have stored my service credentials in Azure Keyvault it should pick the values from vault and deploy the resources.below is script ...
0
votes
0
answers
51
views
Issues with Authenticating GET Operation Status using Management Certificate in Azure
I'm encountering authentication problems while attempting to perform a GET operation statuswithin Azure using a management certificate. I followed the steps outlined in this documentation to generate ...
0
votes
1
answer
90
views
Error getting Azure secret value by secret name in python
I am receiving the below error when trying to get the secret value,
AttributeError: 'coroutine' object has no attribute 'token'
sys:1: RuntimeWarning: coroutine 'AzureCliCredential.get_token' was ...
1
vote
2
answers
117
views
How often do the public facing ip addresses of azure devops change?
I have an Azure keyvault that has been locked down, but I need to access it from Azure DevOps. I know the IP address, but when reading online, it appears this IP address (or range) changes often. Is ...
0
votes
1
answer
106
views
Unable to recovered azure key-vault , it has soft-delete enable
unfortunately my ARM template deployment (using azure DevOps service connection which has subscription level access) deleted azure keyvault which has soft-delete enable with 90 period but we cannot ...
0
votes
2
answers
83
views
Retrieve a list of strings from one key vault secret
I need to use the Options pattern to populate this class from the key vault
public class TestOptions
{
public string Continent {get; set; }
public List<string> Countries{ get; set; }
}
...
0
votes
2
answers
132
views
Winform application - error on getting Azure secret from KeyVault "DefaultAzureCredential failed to retrieve a token from the included credentials."
I have winform application written in c#. I am trying to fetch azure secrets from Azure KeyVault. I have written below function to fetch the secret.
private async Task<string> ...
0
votes
1
answer
119
views
Azure Keyvault secret auto rotation and notification before expiry
Looking for an automated way to set notification for Azure Keyvault secret expiry before 1 month of time and renew the expiry date on approval based from the Azure Devops pipeline side or any way in ...
-1
votes
1
answer
178
views
Anyone else had issues using an Azure-key-vault-connected pipeline variable group for an "Invoke Azure Function" pipeline check?
I am configuring an Azure DevOps pipeline environment check of type "Invoke Azure Function". I am using a pipeline variable group in order to reference the function key value as a variable. ...
0
votes
0
answers
29
views
Azure KeyVault Request Crashing Web API
We use the Azure KeyVault Secrets to store connection strings, API secrets, etc. We have written a small DLL to fetch the secrets:
CTOR:
Get the x509 certificate from the server (it is installed on ...
0
votes
1
answer
87
views
How do I retrieve value from Azure Keyvault to cypress.config file
I have created an Azure Keyvault with values such as username, password, clientid and secret id.
I need to access these values in the env in cypress.config.js
env: {
baseUrl: BASEURL,
username:...
0
votes
1
answer
61
views
How to determine which Azure Keyvault contains certain keys with Databricks dbutils
Is it possible to determine which keyvault holds certain keys with Databricks DBUtils.
For example, if I run dbutils.secrets.list("my_scope_dev") I will be able to see existing keys. Is ...
1
vote
1
answer
109
views
Encrypt a string using local public PEM file, decrypt using private key in Azure KayVault
I'm trying to write a proof of concept whereby we can encrypt a string using a public key locally and decrypt the string with the associated private key in Azure Key Vault.
I can successfully do this ...
0
votes
1
answer
114
views
Read a secret key from azure key vault in apim
i need to validate a hmac in my apim policy. For which the hmac secret will be stored in azure key vault. Below are the steps that i will be following in my policy
Read the secret key from the key ...
0
votes
1
answer
54
views
Copy Azure KeyVault secrets from one Vault to Another using Powershell, supporting all characters
I need to migrate secrets stored in Azure KeyVault from one vault to another.
I have a script which almost works; however, some of the passwords have an & in them, causing the secret not to be ...
0
votes
1
answer
74
views
APIM connection to KeyVault via SystemAssigned Managed Identity fails
I'm using the following setup described here. https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-properties?WT.mc_id=Portal-fx&tabs=azure-cli
I setup APIM with a system ...
0
votes
1
answer
168
views
Azure Databricks won't access key vault permissions error from RBAC
I am trying to follow this tutorial: https://learn.microsoft.com/en-us/azure/databricks/getting-started/connect-to-azure-storage
I have followed it to a tee but when I have got to Step 6: Connect to ...
0
votes
1
answer
90
views
Why do I get an Azure key Vault No-cors policy error?
I get this error:
localhost:3000' has been blocked by CORS policy: Response to preflight
request doesn't pass access control check: No
'Access-Control-Allow-Origin' header is present on the requested
...
0
votes
1
answer
56
views
Az CLI first request takes longer time in a stateless machine
I have a stateless machine that has Az CLI installed in the image (Windows 2022 server) in the following way
Write-Host "Installing Azure CLI"
Invoke-WebRequest -Uri https://aka.ms/...
-1
votes
1
answer
81
views
Access to setup Azure keyvault principal in Access policy
I am trying to access key vault secret from a web activity. But I am not able to set a principle in the access policy of my vault. I have key administrator accesses. In fact I have the owner and ...
0
votes
1
answer
82
views
Azure Function Key Vault reference mapping for keys
If your Azure environment is configured correctly, you can use "Azure Key Vault references" in the configuration of an Azure Function to automatically import a secret or a certificate as an ...
0
votes
1
answer
62
views
Error attaching trusted_root_certificate to terraform azurerm application gateway
I would like to have an Ingress in my k8s cluster point to a service and pod on my k8s cluster which will serve a tls cert signed from a CA which is not well-known. To do this, I am trying to add a ...
0
votes
1
answer
85
views
Azure Keyvault Secret with username and ssh key for SFTP
I need to store a username and ssh file in keyvault to use to connect to a remote SFTP server.
I can create a secret with a username/password combo. I can create a secret with the ssh keyfile. I can'...
0
votes
2
answers
64
views
How to integrate azure key vault in spring boot with property source?
I am in new in Azure. I created a small application where I have mentioned one secret JWT-SET-URI in application.properties file. The secret, I have created in azure key vaults.
Spring boot version: 3....
0
votes
1
answer
56
views
Cannot selects principals on vault acces policy - list is empty. What rights are missing?
I'm trying to grant my app access to my vault on azure but I have no items on the list. If I search I can't see even my own user, nor anything else.
I've read the entries on Azure key vault - WebApp ...
0
votes
0
answers
50
views
Packer -ARM Builder Keyvault access denied to first party service
I have used the build_key_vault_name by brining my own keyvault which is having network restriction and allowed only to my private network within vnet however packer is somewhat using the Azure ...
0
votes
1
answer
119
views
az cli command to create service principal doesn't create certificate in keyvault
I'm running the below lines of my script:
Write-Host "Creating KeyVault..."
az keyvault create --name mykeyvault --resource-group myrg --location polandcentral
Write-Host "Creating ...
0
votes
2
answers
149
views
How to use azure key vault with github actions?
I have a github action where I am trying insert a secret from azure key vault into my appsettings.json. I was using, https://github.com/Azure/get-keyvault-secrets and it was working but getting a ...
1
vote
1
answer
102
views
Unable to retrieve secrets from Azure KV via Azure functions app
Have the following code to retrieve the secrets from KV using azure functions but when I run test/run, I keep getting 401 unauthorized. I have changed identify to system defined and assigned the ...
0
votes
1
answer
36
views
Keyvault permission error to store Service principal secrets
Error: checking for presence of existing Secret "Project-1-Client-Id" (Key Vault "https://project1-power-bi-kv1.vault.azure.net/"): keyvault.BaseClient#GetSecret: Failure ...
0
votes
1
answer
80
views
Does azure-spring-boot-starter-keyvault-certificates libray support Azure AD Workload Identity
I work on a project written in Kotlin and Spring, executed on Azure Kubernetes Service (AKS) and I am using the library com.azure.spring:azure-spring-boot-starter-keyvault-certificates:3.14.0 with the ...
0
votes
1
answer
89
views
List all the Key Vaults the Application ID has been granted access to via PowerShell?
Running the below code, I can get all the Application IDs granted access to a particular Key Vault.
$KVName = 'My-Key-Vault-Name'
$KV = Get-AzKeyVault -VaultName $KVName
$accessPolicies = $KV....
0
votes
1
answer
54
views
Retrieve Azure Vault Secrets by Tag
I'm using the following command to try to query Azure Key Vault secrets by Tag to see if they line up with the values I'm searching for.
This is the command I'm using
Get-AzKeyVaultSecret -VaultName &...
0
votes
1
answer
125
views
Azure Function : Client address is not authorized and caller is not a trusted service while trying to access Azure Key vault
I have a keyvault in which I have the secrets. I have an Azure function app with a system-assigned identity that has 'Get' secret access on this keyvault.
Below is my function code
import logging
...
2
votes
1
answer
97
views
401 Unauthorised while retrieving keys from Key vault in API
I want to know keys present in Azure Key Vault using API. Referred this document: (https://learn.microsoft.com/en-us/rest/api/keyvault/keys/get-keys/get-keys?tabs=HTTP)
Using this request to get ...
0
votes
1
answer
49
views
dotnet KeyVault Certificate client - Certificate issued by a non-integrated CA
Using the dotnet KeyVault Certificate Client is it possible to perform the following actions?:
Create a certificate that's "Certificate issued by a non-integrated CA". Putting it into the &...
0
votes
1
answer
273
views
How to store and retrieve an SSH Private Key in Azure Key Vault
Question
Is there a correct way to store an RSA Private Key in Azure Key Vault such that I can retrieve it (under a different user, on a different device) using powershell cmdlets (ideally the az....
0
votes
1
answer
53
views
Verifying an Azure Key Vault signature without vault access
I sign a file with Azure Key Vault and store the signature. Then, on a machine without vault access, I would like to verify the signature with the original file, the RSA modulus and RSA public ...
0
votes
1
answer
70
views
Signing a string with the Azure Key Vault Python SDK
I am looking to sign a string with a certificate created and stored inside Azure Key Vault. I am using the Python SDK provided by Microsoft to fetch the certificate. I proceed to extract the private ...
0
votes
1
answer
115
views
Binding a Key Vault Certificate with to Azure App Service
I recently acquired an SSL certificate from a provider, and I opted to use a CSR with an Azure Key Vault certificate. Currently, the Key Vault certificate is in an 'Enabled' status, and I have ...
0
votes
1
answer
71
views
Docker-compose with secrets from Azure key-vault secret in multi-container linux web app
Is there a way to set ENV variable from azure key-vault secret for a multi-container linux web app?
I am able to set the ENV variables in the app_config from key-vault secret using the @Microsoft....
-1
votes
1
answer
124
views
How to get alerted if a secret changes in Azure KeyVault
I would like to get alerted if the value of a secret on my KeyVault was updated. However, after performing this action, I didn't see any logs in neither the associated Log Analytics nor the Activity ...
0
votes
0
answers
40
views
Can I force a refresh of an AuthenticationHandler following a key rotation via Azure Key Vault without restarting the app?
I have a web app hosted in Azure that uses external login providers that are configured at start up.
The clientId and Secrets are read in from Azure Key Vault which is set up to reload on a regular ...
0
votes
0
answers
68
views
Dynamic Key Value pair storage class with interface in C# and ASP.NET Core
Let's say I want to have an interface and class to store key value pairs from external provider (e.g. Azure KeyVault).
I have this interface:
namespace SampleNamespace.Interfaces
{
public ...
0
votes
1
answer
85
views
Get value for new SQL encryption key from azure keyvault
Regarding my previous question, does anyone know how to retrieve the ENCRYPTED_VALUE for rotating the encryption key (see script below), when the new column_master_key_name is generated from the azure ...
0
votes
1
answer
33
views
secure access to keyvault from desktop app
I created a consol app to access Azure key vault. To do that I put the appId and appSecret in appsettings.json file. Is this secure. I mean putting the secret of the app here to be able to use it and ...
0
votes
0
answers
76
views
Unable to import external key into Azure Key Vault
I followed the same steps as mentioned in this issue.
Import key in azure key vault. BYOK using the openssl command instead an vendor HSM tool
1.Generate and download the KEK (Key Encryption Key) as ...