1. Configuration in Azure.
Done right.

2. Rick van den Bosch
@rickvdbosch
rickvandenbosch.net
rickvdbosch@outlook.com

3. Agenda
• Introduction
• Application Settings
• App Configuration
• Key Vault
• Managed Identities for Azure Resources
• Closing

4. Introduction

5. What is configuration?
“Configuration files are
files used to configure the parameters
and initial settings for
some computer programs.”

6. Configuration options

7. Application Settings

8. Application Settings

9. Application Settings
• Variables passed as environment variables to the application code
• ASP.NET (Core):
• like <appSettings> in web.config or appsettings.json
• values override the ones in web.config or appsettings.json
• DEV settings in web.config or appsettings.json, PRD values in App Settings
• Encrypted-at-rest
• Hidden by default
• Bulk edit

10. DEMO

11. App Configuration

12. App Configuration
Universal, fully managed configuration store
Fast retrieval of configurations for any Azure application
Complete data encryption, at rest or in transit
Native integration with popular frameworks
such as .NET and Java Spring

13. Reduce configuration complexity across
multiple environments

14. Improve security by separating configuration
from code

15. DEMO

16. Key Vault

17. Key Vault
• Secrets Management
• Key Management
• Certificate Management
• Store secrets backed by Hardware Security Modules

18. Why use Key Vault?
• Centralize application secrets
• Securely store secrets and keys
• Monitor access and use
• Simplified administration of application secrets
• Integrate with other Azure services

19. Key Vault
• Tool for securely storing and accessing secrets
• A vault is a logical group of secrets
• Authentication needed
1. Service principal and secret
2. Service principal and certificate
3. Managed Identity

20. DEMO

21. Managed Identities
for
Azure Resources

22. Managed Identities for Azure Resources
• Provide Azure services with a managed identity in Azure AD
• Use the identity to authenticate to any service
(that supports Azure AD authentication)

23. Supporting services – Managed Identity
“We are in the process of integrating managed identities for Azure
resources and Azure AD authentication across Azure.”
• Azure Virtual Machines
• Azure Virtual Machine Scale Sets
• Azure App Service
• Azure Blueprints
• Azure Functions
• Azure Logic Apps
• Azure Data Factory V2
• Azure API Management
• Azure Container Instances
• Azure Container Registry Task

24. Supporting services – Azure AD Auth.
“We are in the process of integrating managed identities for Azure
resources and Azure AD authentication across Azure.”
• Azure Resource Manager
• Azure Key Vault
• Azure Data Lake
• Azure SQL
• Azure Event Hub
• Azure Service Bus
• Azure Storage blobs and queues
• Azure Analysis Services

25. DEMO

26. Closing

27. Resources
theurlist.com/ciadr

28. Questions?
rickvdbosch@outlook.com
@rickvdbosch