locked
storing secrets RRS feed

  • Question

  • Hi,
    What would be the best way to store custom secrets on data factory?
    I'm using custom DotNet Activity and need to store password for my custom data source.

    Thanks

    Monday, July 11, 2016 5:54 AM

Answers

  • The easiest option is to always use a "password" property inside "extendedProperties" and the value of the password will automatically masked in UX or anywhere showing activity properties for display purposes.

    https://azure.microsoft.com/en-us/documentation/articles/data-factory-use-custom-activities/#access-extended-properties

    If your DotNetActivity runs on Azure Batch, the best practice is to add a cert to either decrypt or call to KeyVault to get secrets:

    https://azure.microsoft.com/en-us/documentation/articles/batch-api-basics/#security-with-certificates

    with the "extendedProperties" in a DotNetActivity.

    • Marked as answer by nadia8286 Sunday, July 17, 2016 7:25 AM
    Friday, July 15, 2016 11:44 PM
    Answerer

All replies

  • The easiest option is to always use a "password" property inside "extendedProperties" and the value of the password will automatically masked in UX or anywhere showing activity properties for display purposes.

    https://azure.microsoft.com/en-us/documentation/articles/data-factory-use-custom-activities/#access-extended-properties

    If your DotNetActivity runs on Azure Batch, the best practice is to add a cert to either decrypt or call to KeyVault to get secrets:

    https://azure.microsoft.com/en-us/documentation/articles/batch-api-basics/#security-with-certificates

    with the "extendedProperties" in a DotNetActivity.

    • Marked as answer by nadia8286 Sunday, July 17, 2016 7:25 AM
    Friday, July 15, 2016 11:44 PM
    Answerer
  • Note the "password" option only works if you have only one password to be used in your activity and hence not generic.
    Friday, July 15, 2016 11:45 PM
    Answerer