Use Azure Managed Identities and Azure Key Vault to Protect Your .NET API Secrets!

Use Azure Managed Identities and Azure Key Vault to Protect Your .NET API Secrets
We all know we shouldn't have our app secrets and production connection strings in our app settings file, but sometimes it's an easy trap to fall into. We don't want sensitive information possibly being pushed to the repo or just sitting in the project. All it takes is one mistakes for secrets to be exposed. By harnessing managed identities and azure keyvault you can take everything in your app settings file and throw it into Azure. Allowing you to have a safer .net app and keep a clean app settings file.

#ManagedIdentity #azure #dotnet

TimeStamps
----------------------------
00:00 Intro
00:23 What Are Managed Identities?
01:30 Our .Net 7 API Project, DB, & Azure Services
02:13 The Problem To Fix In Our App Settings File
03:04 Nuget Packages You Need!
03:22 Updating .Net 7 API To Use Managed Identities In Production
06:04 Creating Our Azure Web APP & Adding Managed Identity To Azure Key Vault
08:20 Demo of Managed Identities Working In Azure

[IsraelQuiroz]

What other suggestions do you guys have for developers that use their Appsettings file in case Azure services are not an option?

[FraggingSickness]

You are a LEGEND.
Have been struggling with getting this to work and by watching your guides I can finaly safely publish my project to Azure!

Thanks man!

[chithiravelupothirajan]

Hi Israel Quiroz, Thanks for this wonderful video. Very informative. I have a question in your tutorial, where you are creating an object of KeyVaultClient. But I dont see it is being used further down in the code. I would appreciate if you could explain that. Also, have you uploaded this code in any repo and shared it?

[oscargonzalez]

The best explanation of azure key vault I've seen. Just what I was looking for.👍

[holgi]

In the Middleware "AddAzureKeyVault" the Parameter expect use the NuGetPackage But this is outdated. Any ideas how to get the needed TokenCredentials?

[pt_trainer]

Thanks, but what would I do if I plan to have a VPS for my web app instead of running in on an App Service?

Is there something else I could use in this case?

[athara]

Good information bro. Really well explained.

[TrusanaDeveloper]

Nice tutorial, Could you please do a demo with UMI(User Managed Identity) too?

[mustafaaltnok]

Thank you for the video. What about key vault-aks integration?

[amandawinchester]

Es posible probar desde el local la key vault sin publicar la API ?