Tag
key-vault
Safeguard articles tagged "key-vault" — guides, analysis, and best practices for software supply chain and application security.
3 articles
Cloud Security
Azure Key Vault Managed HSM for Artifact Signing: Pattern Library
Managed HSM gives you FIPS 140-3 Level 3 key custody in Azure. We map the patterns for using it as the root of trust for code signing, container signing, and SBOM attestation.
Apr 4, 20267 min read
Cloud Security
Choosing between Key Vault access policies and RBAC permi...
Access policies or RBAC? A concrete breakdown of Azure Key Vault's two permission models, when each still makes sense, and how to migrate safely.
Jan 15, 20267 min read
Best Practices
Azure Key Vault Rotation Patterns
Rotation is the Key Vault feature most teams nominally have and few actually operate. A walk through the patterns that work for secrets, keys, and certificates at scale.
May 18, 20248 min read