Page 1 of 2

Azure KeyVault is a secure vault storage (cloud service) designed to manage keys, secrets, and certificates.

Types of Keys (Storage)

• Keys: Azure VM disk encryption keys
• Secrets: Application secrets such as database passwords and admin credentials
• Certificates: (Content missing, please review)

---

Scenario #1

Diagram: Application secrets stored in KeyVault

flowchart LR  
    DB[Database] --> WEB[Web App]  
    WEB --> KV[KeyVault]  
    KV --> WEB  

---

Disadvantages

1. Linux X: Linux X → Limited Linux support
2. Key Visibility: Keys can still be visible in the Azure portal
3. Version Dependency: Requires specific Azure versions

---

KeyVault Features

1. Firewall
2. Azure Active Directory Integration
3. Auditing
4. Replication & Scaling

---

Page 2 of 2

Authentication Methods

Authentication to Azure KeyVault can be done via:

1. Managed Identities
2. Service Principal & Certificate
3. Service Principal & Secret

Supported Modes:

• System Managed:
  • Windows credentials
• Deployed on Azure:
  • Provides its identity to KeyVault access policy

---

Authorization

Authorization is managed by:

1. Access Policies
2. (Content missing, please review)

---

References & Related Topics

• Azure Active Directory Integration
• Key Management Best Practices
• Cloud Security Solutions
• Microsoft Azure Documentation on KeyVault