Quick Notes103 words
Key Vault for secrets, keys and certificates — quick notes
Key Vault — quick notes
| Object | Nature |
|---|---|
| Secret | A value the caller retrieves |
| Key | Cryptographic key that never leaves the vault — operations happen inside |
| Certificate | X.509 with private key |
| Pipeline access | Route |
|---|---|
| Variable group | Linked to Key Vault |
| Task | Azure Key Vault task fetches at run time |
| Authenticate with | Managed identity / workload identity federation |
Key idea: private key material must never leave the vault → use a key, not a secret containing key material.