Azure App Configuration Connection

Using the Azure App Configuration connection on a self-hosted instance of Hanzo KMS requires configuring an application in Azure and registering your instance with it.

Prerequisites:

• Set up Azure and have an existing App Configuration instance.

Navigate to Azure Active Directory > App registrations to create a new application.

Azure Active Directory is now Microsoft Entra ID.

Create the application. As part of the form, set the Redirect URI to https://your-domain.com/organization/app-connections/azure/oauth/callback.

The domain you defined in the Redirect URI should be equivalent to the SITE_URL configured in your Hanzo KMS instance.

For the Azure Connection to work with App Configuration, you need to assign multiple permissions to the application.

Azure App Configuration permissions

Set the API permissions of the Azure application to include the following Azure App Configuration permissions: KeyValue.Delete, KeyValue.Read, and KeyValue.Write.

Obtain the Application (Client) ID in Overview and generate a Client Secret in Certificate & secrets for your Azure application.

Back in your Hanzo KMS instance, add two new environment variables for the credentials of your Azure application.

• INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_ID: The Application (Client) ID of your Azure application.
• INF_APP_CONNECTION_AZURE_APP_CONFIGURATION_CLIENT_SECRET: The Client Secret of your Azure application.

Once added, restart your Hanzo KMS instance and use the Azure App Configuration connection.

To use client secret authentication, ensure your Azure Service Principal has the required permissions and is connected to the Azure App Configuration resources you want to use.

Prerequisites:

• Set up Azure and have an existing App Configuration instance.
• The service principal must be connected to your target Azure App Configuration resource(s)

Configure the required API permissions for your App Registration to interact with Azure App Configuration:

Azure App Configuration permissions

Set the API permissions of your Azure service principal to include the following Azure App Configuration permissions: KeyValue.Delete, KeyValue.Read, and KeyValue.Write.

Setup Azure Connection in Hanzo KMS

Navigate to the Integrations tab in the desired project, then select App Connections.

Select the Azure Connection option from the connection options modal.

You can optionally authenticate against a specific tenant by providing the Azure Tenant or Directory ID.

Now select the OAuth method and click Connect to Azure.

You will then be redirected to Azure to grant Hanzo KMS access to your Azure account. Once granted, you will redirect you back to Hanzo KMS's App Connections page.

Fill in the Tenant ID, Client ID and Client Secret fields with the Directory (Tenant) ID, Application (Client) ID and Client Secret you obtained in the previous step.

Your Azure App Configuration Connection is now available for use.