Forum Discussion

Srisakthi's avatar
Srisakthi
Super User
1 year ago
Solved

Azure Key Vault Connection

Hi Everyone,   There is an Azure Key Vault support introduced for connections in Fabric with Authentication Method as OAuth. I have couple of questions 1. Is there anything in roadmap with Service...
admin
security
  • v-dineshya's avatar
    v-dineshya
    1 year ago

    Hi Srisakthi ,

    You can create and manage Key Vault connections in the Data -> Connections tab.
    Direct usage of those Key Vault connections in Lakehouse or Notebook environment is not natively exposed yet.

     

    I suggest submitting your detailed feedback and ideas through Microsoft's official feedback channels, such as Microsoft Fabric Ideas. Feedback submitted through these channels is frequently reviewed by the product teams and can contribute to meaningful improvements.
    Fabric Ideas - Microsoft Fabric Community


    If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

     

    Thank you

     

Srisakthi's avatar
Srisakthi
Super User
1 year ago

Hi burakkaragoz ,

If Service Principal approach is in roadmap, then we are good.

 

Azure Managed Identity:

Using Azure Managed Identity and ADF is not straight forward one. 

Python:

This is not utilising Fabric Notebook.

 

Here is the notebook approach if you want to utilise for

Notebook:

from azure.identity import ClientSecretCredential
from azure.keyvault.secrets import SecretClient
import ast


tenant_id = 'your tenant id'
client_id = 'client id'
client_secret ='client secret'

credential = ClientSecretCredential(tenant_id, client_id, client_secret)
vault_url = f"https://{keyvault_name}.vault.azure.net/"

secret_client = SecretClient(vault_url=vault_url, credential=credential)
secret = secret_client.get_secret(sp_secret_name)
secret_res = ast.literal_eval(secret.value)
 
Regards,
Srisakthi
burakkaragoz's avatar
burakkaragoz
Super User
1 year ago

Hi Srisakthi ,

 

Yep, you can totally use Azure Key Vault secrets inside a Fabric Notebook. Here’s a quick way to do it using mssparkutils:

# Replace with your actual Key Vault URL and secret name
secret_value = mssparkutils.credentials.getSecret(
    'https://<your-keyvault-name>.vault.azure.net/',
    'your-secret-name'
)
print(secret_value)

This works as long as your workspace has access to the Key Vault and the connection is already set up in Fabric. No need to manually handle tokens or credentials—Fabric handles that behind the scenes.

  • yashaswi_raj's avatar
    yashaswi_raj
    Helper I
    1 year ago

    Hi burakkaragoz , no above solution not works if workspace has access to key vault , rather user session authentication is used here