Protecting Encryption Keys with Azure Key Vault

Discover how to safeguard encryption keys and sensitive data using Azure Key Vault in this comprehensive conference talk. Learn to set up and configure Azure Key Vault, leveraging Hardware Security Modules (HSMs) for enhanced protection in regulated industries like healthcare, finance, and insurance. Explore coding techniques, security patterns for cloud-based multi-tenant environments, and essential topics such as Azure AD authorization, application access to the vault, local encryption key wrapping, connection string encryption, and audit logging for compliance. Gain practical knowledge to immediately implement Azure Key Vault in your projects, ensuring robust data protection against potential breaches in cloud environments.

Intro
The threat of data breaches Cryptography overview Key management options Introducing Azure Key Vault HSM Patterns and Practices
Data Breaches are Inevitable
Don't Just Focus on Perimeter Security
aws AWS HSM & AWS KMS
Once a Key goes in the Key Vault, it never comes out again
Keys vs Secrets
Multiple Vaults for Environments
NEVER share keys from production in any other environment
Secrets are versioned in the Key Vault
Salted Hash Passwords
A digital is a mathematical technique used to validate the authenticity and integrity of a message, software or digital document