Dynamic database connection strings and how to store them securely

Question

My requirement is like below

In my recent project contains .NET core API and Angular web client. Single instance of the application is deployed Azure and multiple customer are using this. Customers are having separate databases and unique customer ref will be provided when they login to the application. That reference is used to identity the customer and connected to the relevant customer database. Customer db connection string will be retrieved from master database and application will be connected that customer db. All the customer transactions will be saved on related customer db. As per the existing behavior customer db connection strings a maintain in a table. I need to come up with a solution to improve the security of those sensitive information.

One solution in my mind is :- Store databases connection string in key vault as encrypted and retrieve it.

Is there a way to user User assigned identities for that purpose (some kind of way to pick the identity based on customer reference) ?

What is the most suitable architecture for this kind of scenario?

Thanks

Answer 1

Using Azure Key Vault to store sensitive information is a recommended practice. Keep your customer database connection strings securely in Key Vault as secrets. This prevents direct access to sensitive data and allows you to control access to the secrets.