Getting warning as "Cannot create any credentials with the current environment variables in azure portal", in azure webapp while connecting to keyvault.

Question

I've a webapp A(Java) hosted on azure. It's trying to connect to keyvault to fetch the secrets. I'm using system assigned managed identity(enabled for A) and I've added A in access policy of keyvault. In my code for A I'm using DefaultAzureCredential() to connect to keyvault, but I'm getting below warning(severity:error), but able to fetch the secrets.

"Cannot create any credentials with the current environment variables in azure portal".

Upon checking I found that, DefaultAzureCredential() first checks environment variables, if it fails then it goes for managed identity.

Let me know is my understanding correct. Also, what code changes should I make so that it can skip checking environment variables and directly go for managed identity?

Thanks!

Answer 1

Hi @Vaddiparthi Venkata Srivatsha ,

Yes, the DefaultAzureCredential gets the token based on the environment the application is running. If you receive the "CredentialUnavailableException" it generally means that the environment variables are not configured or the tenant ID isn't being checked.

Like you said, the default credential chain starts with the EnvironmentCredential

and then moves on to the ManagedIdentityCredential . If you want to skip the EnvironmentCredential you can set ExcludeEnvironmentCredential = true as documented here:

https://learn.microsoft.com/en-us/dotnet/api/azure.identity.defaultazurecredentialoptions.excludeenvironmentcredential?view=azure-dotnet

Then you can make sure the Managed Identity environment variables are set correctly: How to use managed identities for App Service and Azure Functions

Let me know if this is what you are looking for and if you have further questions.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information. Otherwise let me know if you have further questions.