Azure Authentication With Vault
summary
Demo shows Vault configured to use Azure AD: an Azure service principal is created and Vault enables the azure auth method with tenant, client ID and secret, then a role is bound to a specific subscription and resource group and mapped to a web policy that grants read/list on path web/kv/. A KV secret webpass=password=hugsforall is written, an Azure VM uses its managed identity to fetch an AD access token from the IMDS, posts that token to /v1/auth/azure/login, receives a vault token*, and successfully reads the secret and serves it via nginx — the end-to-end flow works.
AI-written summary · about
chapters (5)
related talks
28mHow to Use AKS Pod Identity with Vault
59mProtecting Encryption Keys with Azure Key Vault
31mIntegrating HashiCorp Vault & Active Directory: Pretty Fly for a Windows Guy
51mService Principals and Managed Identities - the Identity tools every Azure developer should know
25mBetter Together: JWT and Vault in Modern Apps
22mSecure your secrets with automation
47mSecuring Serverless Applications in Azure
55mOffensive Azure Security