Designing a strategy to manage secrets, keys, and certificates

Securing secrets, keys, and certificates is as important as securing identities within your cloud and hybrid architectures. Many compliance regulations require customers to manage their keys rather than the cloud provider. Azure allows you to separate these duties with Azure Key Vault. Azure Key Vault is a centralized location where you can protect and manage encryption keys, secrets, and certificates.

Some Azure services use a default configuration for Microsoft-managed keys, such as with Azure Storage accounts. Figure 7.8 shows where you can change that configuration to Customer-managed keys within an Azure storage account:

Figure 7.8 – Configuring customer-managed keys with Azure Key Vault

Each of the features of security management is listed here:

• Secrets Management: Securely store and control access to tokens, passwords, certificates, API keys, and other secrets.
...