Accessing Azure KeyVault Secrets from Spark Notebook with exhaustive IP whitelisting

[sdfabric]

We want to access Azure KeyVault Secrets from Spark Notebook but each time a new IP address comes to whitelist. Please provide a resolution to this.

[Expiscornovus]

Hi @sdfabric,

You are talking about having to avoid adding a new ip address of your Fabric Notebook to the Azure Key Vault service every single time, correct?

As far as I am aware the Fabric Notebooks won't have a static ip or ip-range. See the thread below as a reference:

https://community.fabric.microsoft.com/t5/General-Discussion/Fabric-Notebook-IP-Address-Whitelist/m-...

So, I don't think you can workaround or avoid this behaviour.

You can feed this back to the Fabric Team via: https://ideas.fabric.microsoft.com/

[v-cboorla-msft]

Hi @sdfabric 

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet.
In case if you have any resolution please do share that same with the community as it can be helpful to others.
Otherwise, will respond back with the more details and we will try to help.

Thanks.

[sdfabric]

Hi,

I have posted the idea as suggested through the link, https://ideas.fabric.microsoft.com/ideas/idea/?ideaid=1a95a708-f3fb-ee11-a73c-6045bdb60d0e

[v-cboorla-msft]

Hi @sdfabric 

Thanks for using Microsoft Fabric Community.

Please refer to the document Accessing Azure Key Vault Secrets from Fabric Notebooks to access Azure Key Vault Secrets from a Spark Notebook in Microsoft Fabric.

I hope this information helps. Please do let us know if you have any further questions.

Thanks.

[season_malla]

Greetings everyone

I can access the keyvalut secret in fabric but when i add a new version of secret the whole app fails. I even disabled the old version to amke sure nothing breaks. So is there a way to get the latest version of the secret in keyvault

[sdfabric]

Hi @v-cboorla-msft ,

I tried this approach but still geting the same IP whitelisting issue. Please let me know if I need to raise a support case.

[Dronec]

If you have F64 capacity and above, you can create a private managed endpoint to your keyvaults.