Exploring Cloud Secret Store on Azure
Previously, we did a deep dive into Secrets Manager on AWS. In this chapter, we shall focus on another popular cloud provider, Microsoft Azure. We will learn about Azure Key Vault, a solution provided by Azure to store Secrets and perform encryption and decryption. We will utilize Azure Key Vault in order to store Secrets and use them on our Kubernetes workloads and we also utilize Key Vault to encrypt the Secrets that reside on etcd.
In this chapter, we will cover the following topics:
- Overview of Azure Key Vault
- Introduction to Workload Identity
- AKS cluster and Azure Key Vault integration
- Auditing and logging
- Azure Key Vault for secret encryption
By the end of this chapter, we should be able to store our Secrets in Azure Key Vault, retrieve them on a Kubernetes deployment, monitor secret access through auditing, and encrypt Kubernetes Secrets using Azure Key Vault.