Azure Key Vault URI

Question

Hi guys,

I am trying to explore Azure Key vault.

I tried to generate a vault with RBAC, it has a URI generated.

But if I browse to the generated URI it shows this error:
403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.

Is there any policy to make it accessible?

Thank you.

Answer 1

@chris_nawig
Thank you for the quick follow up on this! As you stated and saw within our Azure Key Vault documentation, the Key Vault URI is only used by other applications or APIs, and not for navigating to using your browser.

Here's an example of how the URI can be used:

• An application may need to connect to a database. Instead of storing the connection string in the app's code, you can store it securely in Key Vault. Your applications can securely access the information they need by using URIs. These URIs allow the applications to retrieve specific versions of a secret. There is no need to write custom code to protect any of the secret information stored in Key Vault.

Here's one example of the the Key Vault authentication flow.
For a full list of Azure Key Vault REST APIs

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Are you following any documentation when deploying your vault via RBAC? - Yes

When you "browsed" to the URI, did you just copy and paste the Key Vault URI into your internet explorer (IE, Edge, Chrome, etc.)? - Yes

Is the URL just for API access? and not for logging in?, because that's the way I understand it when I bump into some documentation.

Have you tried accessing your Key Vault through the Azure Portal?
Yes, it's working fine.
I just wanted to explore how the URI works, i was thinking a user can use it to login but I think it's just for API access but I might be wrong though.

Can you provide a screenshot of what you're seeing?

• It can be found on the properties after setting up RBAC.