Managing Application Configuration and Secrets in Azure
Managing Application Configuration and Secrets in Azure looks at how you can replace traditional app settings files with the Azure App Configuration service and Azure Key Vault. Using these centrally controlled and secure resources prevents storing of sensitive data in code repositories and, thereby, potential data leaks. The lesson starts by describing the security issues with configuration files containing sensitive data uploaded to code repositories. Then, it moves on to how to solve those problems in Azure DevOps during the development process and with deployed apps.
Learning Objectives
Overview of security-related configuration issues
App configuration basics
Feature flags
Accessing Azure Key Vault
Azure DevOps secure files
Intended Audience
This lesson is for students who want to know how to securely store and use application configuration settings and secrets in Azure
Prerequisites
Familiarity with coding concepts
Know about code repositories
Familiarity with YAML pipelines
Resources
Visual Studio source code used in the demo