keyazure-active-directoryautorotateazure-webapps

Azure Application Key (not AKV) rotation mechanism/guidance

Is there any managed way to periodically (90 days) auto-rotate the keys associated with an app in Azure AD via App Registration? The closest I could find is this one - https://github.com/LockTar/AzureAdApplicationRotator

Anyone has any thoughts/experiences with such a type of application key rotation?

Is there a plan to offer a managed service for application key rotation, much like the Azure Key Vault auto key rotation?

Thanks, Girish.

Solution

  • Nothing out of the box is provided in Azure AD to update credentials attached to an app or its service principal automatically.

    Microsoft Graph has an Api that can be used to achieve this programmaticaly. The Update serviceprincipal Api is available to add/update both keyCredentials and passwordCredentials.