Integration of Azure Key Vault for Secret Management in AEM as a Cloud Service

[KannanCh2]

Hi All

Is it possible to integrate Azure Key Vault with AEM as a Cloud Service for managing secrets such as API keys, passwords, and connection strings?

If feasible, what are the recommended steps or best practices for integrating Azure Key Vault with AEM as a Cloud Service?

Please share any related documents .

Thanks

[Rohan_Garg · Accepted solution]

Hi @KannanCh2,
You can refer to the following document - 

Configure an Azure Key Vault

The general steps for integrating Azure Key Vault in AEMaaS would be as follow-

1. Setup Azure Key Vault Key - Create new key vault instance, add secrets to the key vault & define access policies to read these secrets.
2. Access Key Vault in AEM - Ensure IAM (Service Principal or Managed Identify) has permissions to access Key Vault, Then authentication with Key Vault from AEM Application (Azure AD Authentication, Client Certificates etc.) and finally using REST APIs (Azure Key Vault REST API reference) or Azure SDKs (Azure SDK for Java) to retrieve secrets from Azure Key Vault.

Hope this helps!

[kautuk_sahni]

@KannanCh2 Did you find the suggestion helpful? Please let us know if you require more information. Otherwise, please mark the answer as correct for posterity. If you've discovered a solution yourself, we would appreciate it if you could share it with the community. Thank you!