Back to all tools
Azure Key Vault
Centrally manage keys, secrets, and certificates in Azure.
Free-Limited
Security Secrets Management Cloud Platform
Overview
A cloud service for securely storing and accessing secrets, keys, and certificates.
Key Features
- Hardware Security Module (HSM) backed key storage
- Managed identities for keyless authentication from Azure services
- Automatic TLS certificate renewal via DigiCert and GlobalSign integration
- Secret versioning with rollback support
- Access policies and Azure RBAC for fine-grained control
- CSI driver for mounting secrets directly into Kubernetes pods
Real-World Workflows
Injecting secrets into AKS workloads
- 1Enable the Secrets Store CSI Driver add-on in the AKS cluster
- 2Create a SecretProviderClass pointing to the Key Vault and desired secrets
- 3Mount the SecretProviderClass as a volume in the pod spec
- 4Secrets are fetched from Key Vault and mounted as files or environment variables
- 5Managed Identity authenticates the pod to Key Vault — no stored credentials
Automated TLS certificate management
- 1Import or generate a TLS certificate in Azure Key Vault
- 2Enable auto-rotation with a renewal period before expiry
- 3Reference the certificate in Azure Application Gateway or API Management
- 4Certificate is rotated automatically with no downtime or manual intervention
Getting Started
az keyvault create --name myVault --resource-group myRG --location eastus az keyvault secret set --vault-name myVault --name MySecret --value 'MyValue' az keyvault secret show --name MySecret --vault-name myVault
Compare Alternatives
See how Azure Key Vault stacks up against similar tools.