If we are enabling RBAC over the keyvault is there any mapping of role from access policy?
If I remove a user/application from Key Vault Access Policies, which Azure RBAC role should I assign as the equivalent permission? I am migrating a Key Vault from Access Policies to Azure RBAC permissions as recommended. Currently, users/apps have…
Azure Key Vault
How to securely deal with secrets in Azure VM Applications
I am using VM Applications along with a Policy to ensure VMs have mandatory tools installed. Some of those tools require API credentials to communicate with the management platform. Besides scheduled remediation tasks, I would like the VM owners to be…
Azure Key Vault
Unable to download Certificate of Authority from a key vault as a .pfx file
I am attempting to set up certificate based authentication on Microsoft 365. I created a key vault and a certificate but am unable to download the certificate as a .pfx file. It is giving me an error message that reads 'failed to dynamically fetch target…
Azure Key Vault
Has anyone received a data plane failed message before?
Hello, I am attempting to access our Keyvault that is on a VNet and getting the error message in the screenshot. I have followed the link mentioned and still getting the same message. My boss and I have compared screen settings and we have the same…
Azure Key Vault
Azure Function App failing to read Key Vault secrets during runtime
My Azure Function App is integrated with Azure Key Vault using a system-assigned managed identity. The identity has Get and List permissions, and the Key Vault firewall is set to allow Azure services. The app starts normally, but during runtime the…
Azure Key Vault
Unable to delete Recovery Service Vault in Azure
Unable to delete Recovery Service Vault in Azure
Azure Key Vault
The connection to data plane failed. Please refresh and try again.
Unable to access keyvault data plane when trying to access secrets, keys and certificate. Using private endpoint, private link configured not sure why I cant access the data plane. The connection to data plane failed. Please refresh and try again. If…
Azure Key Vault
How do I grant a VM system-assigned identity access to Key Vault secrets?
I enabled a system-assigned identity on my VM, but when the VM tries to fetch a secret, it gets a permissions error. What role or policy should I assign in Key Vault to allow secret retrieval?
Azure Key Vault
Azure Sign-in failed Error code: AADSTS5000225
When I tried logging in to try using Azure Key Vault to code sign a Windows application, I got the error message "Azure Sign-in failed Error code: AADSTS5000225." Can I use it as a new user?
Azure Key Vault
RBAC KeyVault Certificate Reader granted to Web App but still has no access to KV SSL Certs
I've granted my Web App RBAC roles: Key Vault Certificate Reader, Key Vault Secret Reader, and Key Vault Certificate Officer (just for debugging). I have configured the Key Vault firewall to let any of my managed services access. My certificates all…
Azure Key Vault
I accidently created a HSM Azure Key Vault and I wanted it deleted and off my billing
I was working through some exercises with Power Automate and Azure Key Vault when I accidentally created an HSM Azure Key Vault. I never really got it to work right and didn't think much of it until I got my bill of 1261.10 yesterday. I've tried to…
Azure Key Vault
APPX0101 error when packaging a WinUI MAUI app even though Azure Key Vault signing is configured
I have a WinUI app and I am trying to configure package signing with a certificate in our Azure Key Vault. I right-clicked the project, selected "Package and Publish" and picked a certificate from our Azure Key Vault. I know signing works in…
Windows development | Windows App SDK
Developer technologies | .NET | .NET MAUI
Azure Key Vault
Officially document + support RBAC assignments scoped to secrets that don't exist
I'm a big fan of scoping rbac assignments to secrets for shared key vautlts where multiple apps and identities require access to specific secrets. What I discovered recently is I can create role assignments scoped to secret's that don't exist yet. You…
Azure Key Vault
Disabling 'Allow public access from all networks' in Networking is blocking our power automate flows
Disabling 'Allow public access from all networks' in Networking is blocking our power automate flows. There are no IPs defined in power automate scenario, thus we have to enable but since it is not secure, kindly help to provide a solution for this…
Azure Key Vault
How to correctly estimate Azure Key Vault cost
Hello, i have a doubt about how to estimate the cost of using an azure key vault in the following scenario: the vault will hold 3 SSL certificates, each for a different web service, apart from that every xxx days before the ssl certificate expiration…
Azure Key Vault
Obtaining hardware and firmware version of HSM used with Key Vault Managed HSM
Per the article here: https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/overview Managed HSM is using FIPS 140-3 Level 3 HSMs for security. Our regulatory requirements require a method to retrieve the hardware and firmware version of the…
Azure Key Vault
what's the HMAC-SHA256 rate limit for HSM key vault
Just want to check what's the HMAC-SHA256 rate limit for HSM key vault per single HSM instance as I don't see this described in documents any where. I understand that this performance varies based on several factors, like key size and incoming message…
Azure Key Vault
ADF Linked Service fails to authenticate when fetching client certificate from Key Vault, but works when uploaded manually
Hi everyone, I’m trying to connect to SharePoint Online List from Azure Data Factory using a service principal with client certificate authentication (application permissions). The strange part — When the Linked Service is configured to fetch the…
Azure Key Vault
Query on Secrets in Azure Key Vault
Hi Team, I would like to know the difference between the Access Control IAM which is in Azure Key Vault and also in the specific secret. Assume I stored a secret in key vault. Assigned the key vault secrets user role to the Service Principal in key…
Azure Key Vault
Unable to access keyvault when assigned to group, how to fix that??
I have created a keyvault and added few keys and while creation, provided access to a service principal using azure bicep template. var permissionContributorId = 'f25e0fa2-a7c8-4377-a976-54943a77a395' resource popKeyVault…