Secure Azure Functions App Setting Using Azure Key Vault

Click on the current version

Here you can find out your Secret Identifier URI.

Key Vault with a Secret has been created. Now Deploy your Azure Function, which will use your secret.

In Azure Portal, Navigate to Azure Function App:

In networking click on Identity:

Here make sure, Under (System assigned) Identity – Status is On.

"A system assigned managed identity enables Azure resources to authenticate to cloud services (e.g. Azure Key Vault) without storing credentials in code. Once enabled, all necessary permissions can be granted via Azure role-based-access-control. The lifecycle of this type of managed identity is tied to the lifecycle of this resource. Additionally, each resource (e.g. Virtual Machine) can only have one system assigned managed identity."

Save and close it.

Open your Key Vault again -> Click on Access Policies from Left Side Menu:

From Azure Key Vault copy Secret Identifier key,

https://keyvaultdevdemotest.vault.azure.net/secrets/DBConnectionString/a520325d428240888836fabcc8669609

Now open Azure Function Configuration pane:

Click Ok to Save

Application Setting has been added.

Now so code to use this application-setting key in your Function App Code in Visual Studio Code:

Now Publish your Code:

Now Check in Azure Portal:

Now hit URL in a Browser