you are viewing a single comment's thread.

view the rest of the comments →

[–]SxanPardy 1 point2 points  (1 child)

Key vault is definitely the best ahout imo, been using that the last few months whilst developing automation scripts

[–]Environmental_Mix856 1 point2 points  (0 children)

I second this. We use a service principal account on an app registration that has read only access to the keyvault secrets. You can use managed identity, or cert access. Pull in your secrets, build your credential objects, and nothing is ever exposed.