Using getSecret() to retrieve a secret value from KeyVault in Gov cloud

Question

For public cloud we are using getSecret(akvName: String, secret: String, linkedService: String) to get a secret from keyvault. However, as we are setting up our government cloud, the host this uses is the public cloud<keyvault>.vault.azure.net instead of using the government cloud of .us . How can I get the secret in government cloud for a government cloud keyvault. I verfied that the Linked Service base url was government cloud as well.

Answer 1

Hello @natalie,

Welcome to the MS Q&A platform.

The hostname for Key Vault in Azure Government Cloud is vault.usgovcloudapi.net

This is documented here: https://learn.microsoft.com/en-us/azure/azure-government/compare-azure-government-global-azure

I hope this helps.

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community.

Answer 2

GetSecret() defaults to using the public host for the keyvault therefore you'll need to pass in the full domain for the vault name for the respective env.
Gov cloud:

vault.usgovcloudapi.net

i.e.

import com.microsoft.azure.synapse.tokenlibrary.TokenLibrary

val connectionString: String = TokenLibrary.getSecret("<yourKVName>.vault.usgovcloudapi.net", "<yourSecretName>", "<YourLinkedService>")