Know your gear
Azure Key Vault enables Azure subscribers to safeguard and control cryptographic keys and other secrets used by cloud apps and services. Secure key management is essential to protect data in the cloud. Use Azure Key Vault to encrypt keys and small secrets like passwords that use keys stored in hardware security modules (HSMs). With Key Vault, Microsoft doesn't see or extract your keys. Monitor and audit your key use with Azure logging - pipe logs into Azure HDInsight or your security information and event management (SIEM) solution for more analysis and threat detection. Use Key Vault and you don't need to provision, configure, patch, and maintain HSMs and key management software.