How To Securely Access Azure Key Vault With API Calls In Fabric

Key2 Consulting · 2 months ago · 121 views

Author: Kevin McAteer The Challenge Setting up a connection between Fabric pipelines and an Eventstream custom endpoint is a simple task. (If you are unfamiliar with Eventstreams in Fabric, you can find more information here: Microsoft Fabric event streams overview – Microsoft Fabric | Microsoft Learn.)  You can simply use the SaS Key connection provided within your custom endpoint, utilize it within a notebook that takes pipeline parameters and then sends it to your custom endpoint. It then gets sent to your database destination. Below is a visual of what this process looks like.  This was our first solution, quick and easy. The problem with this method is security. The SaS Key connection is hard coded and can be easily accessed just by opening the notebook. It would be great to utilize the Entra ID Authentication through the EventHub protocol. This way, we can integrate Azure Key Vault and have a Service Principal for Azure EventHub to establish a secure connection – but at this point in Fabric’s life cycle it’s difficult to access Key Vault. Despite everything great about Microsoft Fabric, it offers limited integration with Key Vault since day one which can be frustrating to users who require tighter security for their processes. Additionally, there is limited documentation on how to go about integrating with Key Vault at all as the current connection method is in […] The post How To Securely Access Azure Key Vault With API Calls In Fabric appeared first on Key2 Consulting.