Encrypt password at REST API level in ADF

Question

I run Azure ADF and I have files I get via post method.
I use an expression where I provide the user name and the password and it works fine but since the password can be exposed I would like to encrypt/protect the password at the expression level or the REST API level.
is there anything I can try here? (storing the password in a Keyvault would make sense?
Thanks in advance.

Answer 1

Hello @Anonymous ,
Thanks for the question and using MS Q&A platform.

As I unsterstand, you would like to know what options there are for securing credentials with regards to Data Factory and Copy Activity REST API.

Storing the password in Key Vault is a good start, but there are more options you should be made aware of.

First off, securing activity input:

Under the Copy data activity's General tab, at the bottom is option to Secure input. This prevents the input from being logged.

For how to retrieve secrets from Key Vault for use in pipeline (beyond linked services) see how-to-use-azure-key-vault-secrets-pipeline-activities. This uses a Web activity with secure output enabled, to fetch the credential. This can be used in conjunction with the Copy data activity with secure input enabled.

The REST Linked service also allows for Key Vault use. Since you asked about "REST API level", I'm guessing you wanted something beyond the obvious. Something like parameterizng the linked service so it could use several different credentials stored in a Key vault. Here is a picture of a parameterized REST API linked service.

To make this, first go to the bottom and add the parameters. Then go to the User name / Secret name, and click "Edit". Then click in the text box and "Add dynamic content" will appear. Click that to add the reference to parameters.

Please do let me if you have any queries.

Thanks
Martin

---

• Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
  • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators