Reference Key Vault Secrets and Configuration Strategy
We show how App Configuration stores a URI pointer to Key Vault secrets which are resolved automatically using a managed identity with DataReader and KeyVaultSecretUser roles, with a configurable secret refresh interval, and explain how to classify what belongs in Key Vault versus App Configuration based on sensitivity.
