Key Vault | Azure

🔹 𝗔𝘇𝘂𝗿𝗲 𝗞𝗲𝘆 𝗩𝗮𝘂𝗹𝘁 is a cloud-based service that securely stores and manages cryptographic keys, certificates, and secrets. You can use it to protect and access sensitive data from your applications.

𝗦𝗲𝗰𝘂𝗿𝗲𝗹𝘆 𝘀𝘁𝗼𝗿𝗲 𝗮𝗻𝗱 𝗺𝗮𝗻𝗮𝗴𝗲 𝘀𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗲 𝗶𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝘀𝘂𝗰𝗵 𝗮𝘀 𝗸𝗲𝘆𝘀, 𝗽𝗮𝘀𝘀𝘄𝗼𝗿𝗱𝘀, 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗲𝘀, 𝗲𝘁𝗰...

🔹 Azure Key Vault also offers a free tier that includes a limited number of monthly requests and storage. This free tier lets organizations try Azure Key Vault before committing to a paid subscription.

✅ 𝗦𝗲𝗰𝗿𝗲𝘁 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁: Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.

✅ 𝗞𝗲𝘆 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁: Create and control encryption keys that encrypt your data.

✅ 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗲 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁: Provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with Azure and your internal connected resources.

🔹 Enable storing and managing key and password data for applications without directly giving them access to key data.

🔹 Provides key storage and management platform for both on-premises and cloud-based apps and services.

🔹 Hardware security modules are 𝗽𝗵𝘆𝘀𝗶𝗰𝗮𝗹 𝗱𝗲𝘃𝗶𝗰𝗲𝘀 𝘁𝗵𝗮𝘁 𝗮𝗿𝗲 𝘂𝘀𝗲𝗱 for protecting and managing keys.

There are two different levels of management
1️⃣ Managing the Key Vault itself.
2️⃣ Access to the data contained in the KeyVault.

✅ Authentication ➡ This is needed to identify the caller for operations.
✅ Authorisation ➡ Once a caller is identified, authorization is used to determine what operations the caller can perform.

🔹 Azure Active Directory is used to 𝗮𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗲 𝘂𝘀𝗲𝗿𝘀 𝗮𝗻𝗱 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 which try to access the vault. This authentication is performed by the AAD tenant that the Key Vault is a part of.

🔹 Management operations are 𝗰𝗼𝗻𝘁𝗿𝗼𝗹𝗹𝗲𝗱 𝗯𝘆 𝗥𝗕𝗔𝗖. Creation and management are all controlled by RBAC roles. The storing and retrieving of secrets is managed via access policies.

🔹 These access policies are assigned at certain scopes. You can assign an 𝗮𝗰𝗰𝗲𝘀𝘀 𝗽𝗼𝗹𝗶𝗰𝘆 where a user can, e.g., 𝗴𝗲𝘁, 𝗹𝗶𝘀𝘁, 𝗰𝗿𝗲𝗮𝘁𝗲, 𝘂𝗽𝗱𝗮𝘁𝗲, 𝗮𝗻𝗱 𝗱𝗲𝗰𝗿𝘆𝗽𝘁 𝗸𝗲𝘆𝘀. Similarly, there are specific copes for managing secrets and certificates.

More Azure Key Vault HandsOn || Key Vault Integration with AKS — Azure ||

Implemented the Azure Key Vault integration with AKS 👆👆👆