Diagram
An architecture diagram showing Azure Pipelines authenticating via Microsoft Entra ID to securely fetch secrets from Azure Key Vault at runtime, with audit logging and TLS enforcement governing the interactions.
Integrating Azure Key Vault
Azure Key Vault is a dedicated service for protecting secrets, keys, and certificates. It uses strong encryption, often with hardware security modules (HSMs), to keep this data safe. By integrating Key Vault with your pipeline, you create a secure boundary. The pipeline has permission to ask the Key Vault for a specific secret, but the secret itself is never stored in the pipeline's configuration. This separation reduces risk and makes it easier to rotate or update secrets without changing your pipeline code.
Domain 3 of 4
3 practice questions
Practice this DomainLast updated