Azure Key Vault working in locally but getting 403 forbidden error in azure cloud

Question

I am new to Azure. I want to use Azure KeyVault to store secrets like passwords. I have successfully created All steps which mentioned in Microsoft website. And also able to get secrets (passwords from KeyVault ) in our local environment by using Springboot application.properties .

But getting 403 Access denied error when I tried the same in Azure Cloud. It is not generated in local tomcat server. Please suggest me to resolve this issue.

Expected password, but getting 403 .

Answer 1

You might need to

1. Enable system-assigned managed identity on an existing VM
2. Grant your VM access to a Secret stored in a Key Vault
3. Use Springboot key vault dependencies to get the secret.

Answer 2

In PowerShell run these commands to verify if key vault has right access permissions.

• Get-AzureRmKeyVault -VaultName check what objectIds you see
• Get-AzureRmADServicePrincipal -ObjectId check if your service's service principle (from AAD) is listed there.

you can also check out this link which i think may help you.