Integration of Azure Key Vault for Secret Management in AEM as a Cloud Service | Community
Skip to main content
K
KannanCh2
Level 2
May 24, 2024
Solved

Integration of Azure Key Vault for Secret Management in AEM as a Cloud Service

  • May 24, 2024
  • 2 replies
  • 1344 views

Hi All

Is it possible to integrate Azure Key Vault with AEM as a Cloud Service for managing secrets such as API keys, passwords, and connection strings?

If feasible, what are the recommended steps or best practices for integrating Azure Key Vault with AEM as a Cloud Service?

Please share any related documents .

 

Thanks

 

 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Rohan_Garg

Hi @kannanch2,
You can refer to the following document - 

Configure an Azure Key Vault


The general steps for integrating Azure Key Vault in AEMaaS would be as follow-

  1. Setup Azure Key Vault Key - Create new key vault instance, add secrets to the key vault & define access policies to read these secrets.
  2. Access Key Vault in AEM - Ensure IAM (Service Principal or Managed Identify) has permissions to access Key Vault, Then authentication with Key Vault from AEM Application (Azure AD Authentication, Client Certificates etc.) and finally using REST APIs (Azure Key Vault REST API reference) or Azure SDKs (Azure SDK for Java) to retrieve secrets from Azure Key Vault.

Hope this helps!

2 replies

Rohan_Garg
Community Advisor
Rohan_GargCommunity AdvisorAccepted solution
Community Advisor
May 24, 2024

Hi @kannanch2,
You can refer to the following document - 

Configure an Azure Key Vault


The general steps for integrating Azure Key Vault in AEMaaS would be as follow-

  1. Setup Azure Key Vault Key - Create new key vault instance, add secrets to the key vault & define access policies to read these secrets.
  2. Access Key Vault in AEM - Ensure IAM (Service Principal or Managed Identify) has permissions to access Key Vault, Then authentication with Key Vault from AEM Application (Azure AD Authentication, Client Certificates etc.) and finally using REST APIs (Azure Key Vault REST API reference) or Azure SDKs (Azure SDK for Java) to retrieve secrets from Azure Key Vault.

Hope this helps!

    kautuk_sahni
    Community Manager
    kautuk_sahniCommunity Manager
    Community Manager
    June 10, 2024

    @kannanch2 Did you find the suggestion helpful? Please let us know if you require more information. Otherwise, please mark the answer as correct for posterity. If you've discovered a solution yourself, we would appreciate it if you could share it with the community. Thank you!

    Kautuk Sahni
    Terms & ConditionsAccessibility statement

    Loading footer...