KEYVAULT-AZURE

HSM-backed Azure keys and secrets.

Definition

Azure Key Vault exposes REST APIs for Keys (sign/verify/encrypt/decrypt/wrap), Secrets (passwords, connection strings), Certificates (X.509 lifecycle). Native integration with Azure SQL TDE, AKS, App Service. Backup, soft-delete (90 days), purge-protection.

Origin

Launched by Microsoft January 2015 ; Managed HSM September 2021 (FIPS 140-3 Level 3).

Example in context

A French SaaS stores its Azure SQL connection strings in Key Vault and exposes them via Managed Identity to App Service.

Related terms

• AWS KMS — competitor.