Read as
Last updated: April 29, 2026
Azure Key Vault stores keys, secrets, certificates. Managed Identity integration is the win.
Azure Key Vault stores keys, secrets, certificates. Managed Identity integration is the win.
What goes in Key Vault
- Keys (cryptographic; can be HSM-backed in Premium tier)
- Secrets (passwords, connection strings, API keys)
- Certificates (managed lifecycle)
Access models
- Vault Access Policy — legacy; granular per-vault
- RBAC — modern; consistent with rest of Azure
RBAC is recommended for new deployments.
Managed Identity pattern
App registers system-assigned managed identity. Identity granted “Key Vault Secrets User” RBAC role. App fetches secrets via DefaultAzureCredential. No secrets in code.
HSM tier
Premium tier provides HSM-backed keys (FIPS 140-2 Level 2). For higher: Managed HSM (FIPS 140-2 Level 3).
🧠
Check your understanding
Module Quiz · 5 questions
Pass with 80%+ to mark this module complete. Unlimited retries. Each question shows an explanation.
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants