Category: encryption, automation, yaml, puppet

Automation is a necessity in today’s IT landscape but with great power comes great responsibility. Azure helps simplify this process for Azure virtual machines with the use of Azure Key Vault and Azure Managed Identity.

This blog post takes a look at how Puppet can integrate with native Azure services to simplify writing a secret stored in Azure Key Vault to an application configuration file on an Azure virtual machine.

The module utilizes the Azure metadata service to retrieve the access credentials for interacting with Azure Key Vault to access secrets stored in Azure Key Vault.

The Puppet master fetches the sensitive data from the Azure Key Vault and sends the unencrypted data to agent over the secure agent communication channel.

Related Articles