Facing "DNS https://*******.vault.azure.net/ is invalid and cannot be reached" while creating Secret Scope

Arka Debnath 21 Reputation points
2022-06-28T15:49:18.457+00:00

I am trying to implement Access Azure Storage with key vault-backed secrets as described here:

https://learn.microsoft.com/en-us/learn/modules/describe-platform-architecture-security-data-protection-azure-databricks/7-exercise-access-azure-storage-key-vault-backed-secrets

The "Create Secret Scope" step expects Azure Key Vault DNS Name.

However, in my Key Vault, there is no DNS Name. Instead, I see Vault URI.

I copy-pasted Vault URI in place of DNS Name, and Resource ID in place of Resource ID, but then, getting this error:

DNS https://*******.vault.azure.net/ is invalid and cannot be reached.

215799-image.png

What could have gone wrong? Sorry if I have done something silly. I am trying to learn the technology. Need help.

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,052 questions
Azure Databricks
Azure Databricks
An Apache Spark-based analytics platform optimized for Azure.
1,855 questions
0 comments No comments
{count} votes

Accepted answer
  1. MartinJaffer-MSFT 25,996 Reputation points
    2022-06-29T17:32:24.53+00:00

    Hello and welcome to Microsoft Q&A @Arka Debnath

    As I understand you are having difficulty in creating an Azure Key Vault backed Azure Databricks Secret Scope.

    According to DataBricks doc, you were correct in putting the whole Vault URI. That isn't the cause.

    Did you create the Key Vault just minutes before creating the Secret Scope? The DNS might not have finished updating, and so not found the Key Vault. Stuff takes time to propagate in Azure. Try again after 15 minutes. If it still cannot be reached, then something else must be wrong.

    Perhaps the networking settings on the Key Vault are disallowing access by Databricks.

    let me know whether this helps please

    Hope this will help. Please let us know if any further queries.

    ------------------------------

    • Please don't forget to click on 130616-image.png or upvote 130671-image.png button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification
    • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators
    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful