Skip to content

Commit

Permalink
XS✔ ◾ Update rule.md - added Key vault on premise options in pros. (#…
Browse files Browse the repository at this point in the history
…7470)

* Update rule.md - added Key vault on premise options in pros.

* Auto-fix Markdown files

* Update rules/store-your-secrets-securely/rule.md

Co-authored-by: Matt Wicks [SSW] <[email protected]>

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Matt Wicks [SSW] <[email protected]>
  • Loading branch information
3 people authored Dec 7, 2023
1 parent 7512dd9 commit 244a8d4
Showing 1 changed file with 9 additions and 8 deletions.
17 changes: 9 additions & 8 deletions rules/store-your-secrets-securely/rule.md
Original file line number Diff line number Diff line change
Expand Up @@ -144,7 +144,7 @@ Figure: Good practice - Overall rating: 8/10

::: greybox

#### Use Enterprise Secret Management Tool – Keeper, 1Password, LastPass, Hashicorp Vault, etc...
#### Use Enterprise Secret Management Tool – Keeper, 1Password, LastPass, Hashicorp Vault, etc

Pros:

Expand Down Expand Up @@ -194,6 +194,7 @@ Pros:
* Dynamically cycles secrets
* Access granted based on Azure AD permissions - no need to 'securely' share passwords with colleagues
* Can be used to inject secrets in your CI/CD pipelines for non-cloud solutions
* Can be used by on-premise applications (more configuration - see [Use Application ID and X.509 certificate for non-Azure-hosted apps](https://learn.microsoft.com/en-us/aspnet/core/security/key-vault-configuration?view=aspnetcore-7.0#use-application-id-and-x509-certificate-for-non-azure-hosted-apps))

Cons:

Expand Down Expand Up @@ -232,10 +233,10 @@ Figure: Good Practice - Overall rating 10/10

The following resources show some concrete examples on how to apply the principles described:

* https://github.com/brydeno/bicepsofsteel
* https://docs.microsoft.com/en-us/azure/key-vault/general/best-practices
* https://docs.microsoft.com/en-us/azure/key-vault/general/security-features
* https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-5.0&tabs=windows
* https://docs.microsoft.com/en-us/sql/connect/ado-net/connection-strings-and-configuration-files?view=sql-server-ver15
* https://docs.microsoft.com/en-us/azure/azure-app-configuration/howto-integrate-azure-managed-service-identity?tabs=core5x
* https://www.youtube.com/watch?v=F9H0txgz0ns
* <https://github.com/brydeno/bicepsofsteel>
* <https://docs.microsoft.com/en-us/azure/key-vault/general/best-practices>
* <https://docs.microsoft.com/en-us/azure/key-vault/general/security-features>
* <https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-5.0&tabs=windows>
* <https://docs.microsoft.com/en-us/sql/connect/ado-net/connection-strings-and-configuration-files?view=sql-server-ver15>
* <https://docs.microsoft.com/en-us/azure/azure-app-configuration/howto-integrate-azure-managed-service-identity?tabs=core5x>
* <https://www.youtube.com/watch?v=F9H0txgz0ns>

0 comments on commit 244a8d4

Please sign in to comment.