Security & Identity

These labs cover how to secure App Service apps and connect to other Azure services without storing credentials - using managed identity, Key Vault references, and Microsoft Entra ID.

Labs in this section

• Reference Key Vault secrets from App Service
  • Store a secret in Azure Key Vault, point an app setting at it with a Key Vault reference, and let App Service resolve it at runtime using the app's managed identity - so there are no secrets in your code or configuration.

More labs are on the way, including:

• Authentication and authorization (Easy Auth) with Microsoft Entra ID
• Connect to Azure services with managed identity

For reference, see the App Service security documentation.