Everything a .NET dev needs to know about configuration and secret management
summary
Shows how .NET’s configuration chain actually maps into code, demonstrates the Options pattern with validation and reload-on-change, and uses user secrets for local dev plus Azure Key Vault (and Azure App Configuration) in production. Live demo calls /pizzas and /connectionstring, deploys to Azure SQL and an App Service using Managed Identity and DefaultAzureCredential (no stored passwords). Cites GitGuardian numbers: ~24M leaked secrets and ~70% still active, argues never to commit secrets.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:03Why configuration matters
- 7:07Basics of .NET config
- 16:18Options pattern benefits
- 27:32Secure secrets in dev
- 33:33Secrets to production
- 41:04Azure Key Vault & identities
- 44:35Live config demo
- 53:11Key takeaways
related talks
01h 02mEverything a .NET developer needs to know about configuration & secret management
43mSecure Development
47mManaging your Secrets in a Cloud Environment
10mCan you keep it a secret?
51mService Principals and Managed Identities - the Identity tools every Azure developer should know
56mEasier infrastructure and safer secrets with Pulumi, Azure, and .Net Core
50mSecuring configuration settings for applications in Azure
46mSecrets Management for the Modern Tech. Pro