Auto-renewal of secrets for Azure key vaults

Question

Do we have any option of auto-renewal for secrets for Azure key vaults. Currently I see it can be set up manually.

Answer 1

Hi @S, Ramakiran K - thanks for your question.

To confirm, are you asking about auto-renewal for secrets in KeyVault (as opposed to Certificates or Keys, which are different types of resource)? By renewal, I assume you mean regeneration of a new secret (as opposed to extension of the expiration date on a secret)?

While there isn't a built in way to update secrets, you could use a function app to trigger generation of a new secret when the old one is due to expire. There are some tutorials showing this for both single and dual credential rotation at https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation and https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation-dual?tabs=azure-cli.

If I've misunderstood your question, please let me know. Otherwise, if this helps, please mark as answer and upvote so that others can find this answer in the future.

Ed