Overview of Azure Key Vault
Azure Key Vault is a versatile service. It can be used as a secret storage. On Azure Key Vault, we can store cryptographic keys. Also, Azure Key Vault can be used to perform encryption and decryption operations.
Since it is a managed Azure service, it benefits from the features that Azure provides by default on its services.
The features of interest are as follows:
- Azure RBAC and access policy
- High availability
- Logging, auditing, and monitoring
- Integration with other Azure components
We will take some time to examine these features that are crucial to the security of our Secrets.
Azure RBAC and access policy
Every service on Azure is protected from unauthorized usage through an identity access management layer that Azure provides. This layer comes in the form of Azure’s RBAC and access policy. A security principal is an entity that has an identity on Azure and can be a user account, group account, or computer...