API secrets without Azure Key Vault

[LW07]

Hi I'm currently learning to work with Fabric. One of my learning tasks is translating our old processes into Fabric native processes. I need to hold an API key and secret but my own Azure permissions are limited, so I cannot access Key Vault and will not be given access. This is purely research and development work so getting that access or having anything set up for me is bottom of the priority list. In development testing the only way I know will work to call the API is via hardcoding in a notebook. Obviously I don't want to do that. Is there an alternative method for holding the API information as part of a pipeline or otherwise? This feels like a bit of a stumbling block related to the differences in Fabric and Azure administration.

[LW07]

Thanks for the options, @deborshi_nag unfortunately it's OAuth2 I need to use which isn't supported as per the document you sent.

@Fran-Diaz I will use a file in the lakehouse for now I think.

[spaceman127]

Hi @LW07 ,

you have two options for reading a secret from a Key Vault.

Option 1:

As already described by @deborshi_nag , you use the Fabric Connection with Notebook. However, this is still in preview. You also need permissions on the Key Vault to read it. 

Option 2:

You use code to read the data from a Key Vault. The administrator of your organization must also assign you the role “Key Vault Secrets User.” Then you can read the secrets.

Here an Example to read from with python. In my example, I define a few parameters in the notebook beforehand. You don't necessarily need them.

import requests

app_client_id = mssparkutils.credentials.getSecret(f"https://{key_vault_name}.vault.azure.net/", kvclientid_1)

For security reasons, I advise against writing secrets in plain text anywhere. If possible, you should always use a key vault.

I hope this helps.

Best regards.

Rene

Feel free to leave kudos or accept it as a solution. This will also help other community members.

[v-menakakota]

Hi @LW07 ,

Thanks for reaching out to the Microsoft fabric community forum. 

I would also take a moment to thank @Fran-Diaz   , for actively participating in the community forum and for the solutions you’ve been sharing in the community forum. Your contributions make a real difference.

I hope the above details help you fix the issue. If you still have any questions or need more help, feel free to reach out. We’re always here to support you .

Best Regards, 
Community Support Team

[v-menakakota]

Hi @LW07 ,

I hope the above details help you fix the issue. If you still have any questions or need more help, feel free to reach out. We’re always here to support you

Best Regards, 
Community Support Team 

[deborshi_nag]

Hello @LW07 

There's a Preview feature using which you can create a connection using a client_id and secret and use the connection in your notebook. In this way your client_id and secret are always protected. 

Here's a link to the Microsoft doc which shows how to use this feature.

Fabric Connection with Notebook - Microsoft Fabric | Microsoft Learn

[Fran-Diaz]

Hello, 

Ideally, as you know, you'd use a key vault, but since you don't have one, do you have a Lakehouse? You could store them in a text file, even encoded, and then read them from your notebook.