Secretless apps with .NET and Azure Key Vault
Вставка
- Опубліковано 14 лип 2024
- In this episode, Scott Addie joins Christos Matskas to discuss secrets management in .NET apps. They cover the .NET SDK's Secret Manager tool as an option for your local development environment. Next, the Azure Key Vault service is introduced as a more secure option for any environment. You'll see how these two offerings integrate with the .NET Configuration API in an ASP.NET Core Blazor Server app.
Links:
Blazor sample app: github.com/scottaddie/OnDotNe...
Get your questions answered on the Microsoft Q&A for .NET: aka.ms/dotnet-qa
Azure Managed Identity: docs.microsoft.com/en-us/azur...
Azure SDKs: aka.ms/azsdk
Connect with Identity experts on the 425Show: aka.ms/425Show
Get your free Microsoft 365 Account here: aka.ms/425Show/FreeM365
#DotNet #AspNetCore #Security - Наука та технологія
Awesome stuff lads, just wanted to say a massive thank you on this. I've never had to implement Azure Key Vault in the past and this is by far the clearest demonstration I've read/seen. Cheers!
Coincidentally, I was just reading the Microsoft doc on this when the video released. BTW, the Object Id's are masked in most of the video except when the app service is selected at 13:29
App/Object IDs are not sensitive information so it's ok to show :)
How to do the same with console or windows App, the ones that are not deployed to Azure?
Also you mentioned one draw back secret Manager is that it cannot be used with multiple team member, not sure how this solved the issue related to secret manager ?
Also have things changed with .NET 6 or is it still all the same ?
Would be useful if you could have videos on other cloud providers than just Microsoft. Not everyone can afford Azure so would be interesting to see how to manage secrets in GC or AWS.
Thanks for the feedback @Cypher. You can still run AAD protected apps with KeyVault on other platforms like AWS and GC
So, should you use the local user settings to store secrets for local development only? I'm wondering what the best way to use Azure Key Vault for testing locally before I deploy to any environment. Any suggestions would be appreciated@!
Basically it’s more hassle trying to use cloud services locally, where the value is static your best relying on app service config integration with key vault then locally just use configuration values as normal.
azure CLI
Thanks for this! Would this process be any different for a Blazor WebAssembly app as opposed to Blazor Server? TIA!
After following the tutorial, I am able to get secrets just fine. But I am unable to get certificates. Should this method work with certificates? Theres a severe lack of documentation on how to handle certificates in a similar manner.
Can you do an updated video since Azure has changed its permissions?
Error installing Report Viewer in Visual Studio 2019, my project structure is incompatible.
When installing Report Viewer in Visual Studio 2019, it gives the following error:
"The package 'Microsoft.ReportingServices.ReportViewerControl.Winforms 150.1449.0' was restored using
'.NETFramework, Versão = v4.6.1, .NETFramework, Versão = v4.6.2, .NETFramework, Versão = v4.7, .NETFramework, Versão = v4.7.1, .NETFramework, Version = v4.7.2, .NETFramework, Version = v4.8 ' instead of the target structure of the project ' net5.0-windows7.0 '. This package may not be fully compatible with your project. "
I have already researched a lot and did not get the solution.
Can you help me can you help me?
I understood that the structure of my project is
net5.0-windows7.0 it's the Report Viewer is for up .NETFramework, Version = v4.8.
But in the Visual Studio 2019 gives no option to
.NETFramework, Versão = v4.8, only .net 5.0, core 3.1 and core 3.0.
I do wish Apple did all the software. There would be one button with "save my secrets" on it, and that would be that. This is very Microsoft - 2 hours to do what should be 2 minutes.
Hi ,
First of all very good article. It really helped me what i wanted to achieve. I will be greatful to you if you can help me with following queries. I am really stuck at present.
This way of certificate works on when you host it on windows server or running in windows locally. How we can make it run in Linux server? How we can setup the development env in a mac machine?
My application is a Service Oriented Architecture. The services are consumed by mobile and web app. So in development env I host the services locally in IIS, so that i can debug service code with mobile/web code. But the certificate is not picked up by the service so it is not be able to connect to the azure key vault.
A timely response is highly appriciated.
Hi..