Microsoft Certified: Azure Solutions Architect ExpertDesign infrastructure solutionsEasy
A global software development company uses Azure DevOps for its CI/CD pipelines. They need a secure way to store and manage sensitive information like API keys, database connection strings, and certificates, which are used by their pipelines and application code. This sensitive information must be accessible only by authorized services and users, with robust auditing capabilities. Which Azure service is the most secure and appropriate for this purpose?
- AAzure SQL Database
- BAzure Storage Account
- CAzure App Configuration
- DAzure Key Vault
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Key Vault
Azure Key Vault is designed to securely store and manage cryptographic keys, secrets (like passwords and connection strings), and certificates. It provides robust access control, auditing, and integration with Azure services like Azure DevOps, making it the ideal solution for sensitive data in CI/CD pipelines.
Why the other options are wrong
- A. Azure SQL Database is a relational database and should not be used for storing application secrets due to security and management overhead.
- B. Azure Storage Account is for general data storage, not designed for secure secret management with fine-grained access control and auditing for secrets.
- C. Azure App Configuration is for managing application settings and feature flags, not primarily for highly sensitive secrets requiring HSM-backed security and comprehensive auditing.
Azure Key Vault
Azure Key Vault is a cloud service that provides a secure store for secrets, cryptographic keys, and certificates. It enables you to protect sensitive data by storing it in FIPS 140-2 validated hardware security modules (HSMs).
- Secure storage for secrets, keys, and certificates
- Centralized management and robust access control
- Comprehensive auditing and monitoring
Memory trick: Key Vault is your secret safe in the cloud, guarding all your sensitive keys and watching who touches them.