Azure web app connection string in configuration fetch values from KeyVault

Question

I need to configure passwords to be fetched from Azure KeyVault in Azure Web App connection string. Can someone explain how to configure it ?

Thanks in advance !

I tried to get the passwords from key vault in Application settings and it worked fine , but couldn't able to integrate it in connection string.

Refer this documentation, you can use key vault references. — Anand Sowmithiran
– Anand Sowmithiran, Commented Dec 7, 2022 at 14:08
What is the version and framwork of the Web App you are using? — Harshitha Veeramalla
– Harshitha Veeramalla, Commented Dec 8, 2022 at 8:16

Harshitha Veeramalla · Accepted Answer · 2022-12-14 12:20:17Z

0

Create an Azure KeyVault.
Create Secret. Copy the Secret Identifier of the Secret (this has to be used in Azure Configuration Connection String).

enter image description here

Provide necessary grants by using Access policies.
In Azure App Service => Configuration => Application Settings => Connection Strings, add the new Connection string setting.
For .NET Core App, the key name has to be MyNewConn.
For .NET Framework App, the name in the Azure App Connection String must be same as the key name in Local Configuration.

Thanks @Anand Sowmithiran for the Comment.

The value of the Connection string has to be @Microsoft.KeyVault(SecretUri=Secret Identifier).
Replace the Secret Identifier value with the value which we have copied from the KeyVault Secret (In Step 1).

enter image description here

For .NET Core Web App

appsettings.json

 "ConnectionStrings": {
    "MyNewConn": "LocalValue"
  }

string connectionString = configuration.GetConnectionString("MyNewConn");

For .NET Framework Web App

In Web.config file, you must have the below settings

 <configSections>
    <section name="configBuilders" type="System.Configuration.ConfigurationBuildersSection, System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=*****" restartOnExternalChanges="false" requirePermission="false" />
  </configSections>
  <configBuilders>
    <builders>
      <add name="AzureKeyVault" vaultName="KeyVaultName" type="Microsoft.Configuration.ConfigurationBuilders.AzureKeyVaultConfigBuilder, Microsoft.Configuration.ConfigurationBuilders.Azure, Version=1.0.0.0, Culture=neutral"  vaultUri="https://YourKeyVaultName.vault.azure.net" />
    </builders>
  </configBuilders>
  <connectionStrings>
    <add name="MyNewConn" connectionString="Retrieves the value from Azure App Service Connection String" providerName="System.Data.SqlClient" />
  </connectionStrings>

 var conn = ConfigurationManager.ConnectionStrings["MyNewConn"];

Update

In Azure Key Vault, the step where we create the Secret, add the Secret value as the connection string. .

Rest other steps are same.

edited Dec 14, 2022 at 12:20

answered Dec 8, 2022 at 11:08

Harshitha Veeramalla

9,4082 gold badges15 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

jegadish kumar Over a year ago

Thank you @Harshitha, I already tried this way , Can you please share how use Application setting values in connection string ?

jegadish kumar Over a year ago

Its a Dotnetcore - 5.0 Web Application

Harshitha Veeramalla Over a year ago

Please share your appsettings.json file.

jegadish kumar Over a year ago

Please find the appsettings configuration for reference "AllowedHosts": "*", "ConnectionStrings": { "DefaultConnection": "Server=tcp:sqlserver.database.windows.net,1433;Initial Catalog=Database;Persist Security Info=False;User ID=user;Password={your_password};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30" },

Harshitha Veeramalla Over a year ago

Please let me know what exactly you are trying to achieve.

|

Collectives™ on Stack Overflow

Azure web app connection string in configuration fetch values from KeyVault

1 Answer 1

Update

7 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Update

7 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related