I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password stored in the web.config or in the azure portal under application settings.

I created my Key Vault and created an access policy for the web app and my user account. If I select "secrets" in the keyvault menu I only see a few of the database connection strings but not all. I also don't see anything about the connection to our blob container.

Where exactly is keyvault pulling this information from - is it from the application settings menu for the web app or in the web.config code? I'd appreciate any clarity or direction somebody can provide.

1 Answer 1


For this you can follow our documentation for getting an Azure web application to read information from Azure Key Vault by using managed identities for Azure resources. Using Key Vault helps keep the information secure. You learn how to:

  • Create a key vault.
  • Store a secret in the key vault.
  • Retrieve a secret from the key vault.
  • Create an Azure web application.
  • Enable a managed service identity for the web app.
  • Grant the required permissions for the web application to read data from the key vault.


UPDATE: We also have KeyVault References in Preview. This still uses the App Settings but doesn't store the secret, only a reference to the secret.


If you want to get familiar with Managed Identities.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.