Share via

Securing Key Vault Secrets in Azure SQL Server with Database Auditing: Best Practices

Ahwan Mishra 140 Reputation points
2023-10-30T08:44:36.6433333+00:00

I've implemented sp_invoke_external_rest_endpoint to retrieve secrets from Azure Key Vault through Azure API Management.

User's image

^ SQL Code

However, I'm concerned about the security of this approach. If Database Auditing or a similar feature is enabled, what are the risks associated with my secrets potentially being exposed in the logs? Can anyone provide insights or best practices to ensure that secrets remain secure even with auditing enabled?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,447 questions
Azure SQL Database
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Nandan Hegde 36,146 Reputation points MVP Volunteer Moderator
    2023-10-30T15:13:05.6766667+00:00

    My thoughts are only the queries would be displayed in logs and not the secret value/output

    @Erland Sommarskog : Can you please provide your thoughts and confirmation on this if possible?

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.