Named value Logger-Credentials created automatically, which was not expected

Question

I have an Azure API Management resource that has an associated Application Insights. The infrastructure was created with Terraform.

The problem is that a security audit has found that a NamedValue has been created within API Management containing the Instrumentation Key of Application Insights. This is something that wasn't specifically created from Terraform, but rather by its internal calls.

The question is: Is there a way to configure Application Insights within API Management so that it reads the Instrumentation Key from an Azure Key Vault instead of from a Named Value?

Kind regards

Answer 1

@Jesus Arnas Iñigo Thanks for your question.I understand that you are trying to get instrumentation key from Azure Key Vault instead of named value. But you can configure your named values to read the instrumentation key directly from key vault instead of storing it as plain value. Have you considered this approach ?

Reference:

• https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-properties?tabs=azure-portal#add-or-edit-a-named-value