Azure Vault on Standalone ASPNET Core WebApp

Albertk 106 Reputation points
2020-09-23T07:37:26.35+00:00

If I develop ASPNET Core 3.1 Webapp and distribute the Docker to Clients and like to secure symmmetric secret key for the WebApp access. Each docker will have their individual secret key.

My Question is

1) Would someone with access to the Docker-Compose file be able to retrieve the secret key? AFAIK, the Azure Vault access parameters are not secret.
2) Is this the right tech to use or is there better way ?.

Thank you.

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,283 questions
0 comments
Accepted answer
  1. JamesTran-MSFT 36,621 Reputation points Microsoft Employee
    2020-09-24T22:14:56.38+00:00

    @Albertk
    Access to the Azure Key Vault requires proper authentication and authorization before a caller (user or application) can get access. Even if a user retrieved the secret name within your Docker-Compose file, the 'true value' of that secret would still be hidden and secured within the Key Vault, because the secret name is different from the actual value of a secret.

    If you're worried about access control or loss of secret information, you can easily mitigate these issues by using Azure RBAC, which will let you control access to resources such as the Key Vault and keys/secrets within the vault.

    Access policies is another way to secure your keys/secrets, since you can assign your WebApp certain permissions within the vault when it comes to get, set, list, delete, etc.
    28077-keyvault.png

    Lastly, I was able to find a tutorial on how to use Key Vault references within an ASP.NET Core app, which might be what you're looking for.

    I hope this helps! If you have any other questions, please let me know.
    Thank you for your time and patience!

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.