Protecting Encryption Keys with Azure Key Vault
Details
In a world where we are putting our companies data in the cloud, the protection of that data against a data breach has never been more important. In this talk Stephen will show you how to setup and use the Microsoft Azure Key vault to protect your encryption keys and secrets like passwords and connection strings. Azure Key Vault uses the power of Hardware Security Modules (HSM's) to protect your secrets and make sure your solutions are as secure as they can be when working in regulated industries like healthcare, financial and insurance.
As well as showing you how to setup and configure the vault, Stephen will show you how to code against it and various different patterns for security in a cloud base multi tenant environment. Stephen will cover topics like:
- Setup Azure key Vault
- Authorize your application to access the vault with AzureAD
- Accessing the vault from your applications
- Using the Vault to wrap local encryption keys for performance
- Encrypting connection strings as Key Vault secrets to get flexible database routing in the cloud
- Audit logging for compliance
About Stephen:
Stephen Haunts is an independent software developer, Pluralsight Author, Writer for APress, and classroom trainer. Stephen has had a long career working in computer games, banks, retail finance, insurance and healthcare and is now passionate about helping other developers, and professionals succeed in their careers.
Stephen has authored over 14 courses for Pluralsight, written a book on Cryptography for APress, and has spoken and taught workshops at conferences and companies all over the world.
Stephen is also the host of the popular business podcast, the Side Hustle Success Podcast.
Links:
Twitter: @stephenhaunts
Website: https://stephenhaunts.com/
