Securely Retrieve Secrets from Azure Key Vault in .NET Core Web API using ClientId & Secret | LSC

[@mauricioernestocarrizalesm7393]

Dude your content is outstanding! Thank you for taking the time of teaching .Net and Azure, you are a complete rockstar! greetings from Mexico.

[@learnsmartcoding]

My pleasure!

[@iamnoob7593]

Amazing Video , Would request u to make a video on certificates instead of client secret , what are certificates , why it is necessary etc.

[@learnsmartcoding]

Dear subacriber, sure, I will add it to the list and publish soon.

[@divyaJk123]

Your content is really helpful. Just to confirm, can I use azure key vault values for running bdd test cases in pipeline?

[@learnsmartcoding]

Hi Divya, Thank you for watching, and I am glad you liked it. Generally, test cases should not use real objects for test runs. For example, you should mock database , keyvault related thing as mocks. Hope I answered your question Happy coding

[@TellaTrix]

This is not the safest way to handle the secrets man. Secreta should not reveal their own identity.

[@learnsmartcoding]

Hello Tella, Thanks for your opinion. There are multiple ways to handle secret from application. DefaultCredentials/ClientCredentials and also using Managed Identity. This video is all about how we can access KV Secret from .net core application. It is possible and safe to go this way as well. In real time, Org wont provide access to KV to employees other than dev environment. Also, Web App wont be access to developers for Non-Prod environments. There is nothing wrong about this implementation. I have separate videos that talks about Managed Identity to access azure resources from application. You may explain more on your point for me to clarify more on it. Thanks and Happy Coding!

[@TellaTrix]

@@learnsmartcoding I understand your concern and I appreciate your prompt response. I did not mean to criticize you in any way. I haven’t had the chance to review other videos yet, but I am grateful for the update. Your efforts are truly appreciated. Thank you.

[@learnsmartcoding]

Thank you. I always welcome my viewers' and subscribers' comments and opinions. I am happy to correct in case I develivered something not right. In this video, I was sure the way we used is also one of the valid, secure ways to access secrets from .net core app after it is deployed to azure. I appreciate your response, and encourage you to check more videos and share your feedback. Happy coding!