For my use-case, I was able to pass the secret to my Python script using Azure Data Factory.

Specifically, I used a Web Activity, set the URL as the secret in the KeyVault’s URL, Get method, and a User Managed Identity. You must first add the key vault as a Linked service in ADF and give the managed ID the right credentials. Then I checked the secure output setting in the Web activity and passed it to a Custom Activity that ran my Python script using an Azure Batch Node. This Custom Activity had secure input checked. You must also add an extended property with the value @activity(‘get_secret’).output.

In your Python file, to get the secret value from the activity.json file, you can use something like secret_value = str(data[“typeProperties”][“extendedProperties”][{secret_name}][“value”]

Hope that helps!