How to access Azure App Configuration key values from AWS Lambda function

Question

I've configured the access to azure app configuration and vault in my project, it works locally, but when I publish the aws lambda to aws cloud it doesn't access azure key values anymore.

I have configured:

_configuration = new ConfigurationBuilder()
                            .SetBasePath(Directory.GetCurrentDirectory())
                            .AddJsonFile("appsettings.json", optional: false, reloadOnChange: true)
                            .AddJsonFile($"appsettings.{Svc.Name}.json", optional: false)
                            .AddEnvironmentVariables()
                            .AddAzureAppConfiguration(options =>
                            {
                                options
                                .Connect(tempConfig["AzureAppConfiguration:ConnectionString"])
                                .ConfigureRefresh(options =>
                                {
                                    options.Register("ConnectionString", false);
                                })
                                .ConfigureKeyVault(options =>
                                {
                                    options.SetCredential(new ClientSecretCredential(
                                        tempConfig["App:TenantId"],
                                        tempConfig["App:ClientId"],
                                        tempConfig["App:ClientSecret"]
                                        ));
                                });
                            })
                            .Build();

the values are on Json Files, lambda function is getting the right environment, my services configuration applies

serviceCollection.AddAzureAppConfiguration();

all works fine in local machine, but it triggers time out when tries to load Key values running on aws cloud.

Is there some permission/role/access I must grant in lambda's or azure's feature configuration?

Zhenlan Wang · Accepted Answer · 2022-08-08 20:39:08Z

0

Here are a few things I will look

Make sure tempConfig is resolved before the code you shared is reached.
You use the connection string to connect to Azure App Configuration. It should work from anywhere. Please make sure the networking of your lambda is not blocking any traffic to App Configuration IP addresses or its domain "azconfig.io".
Don't load secrets from Key Vault temporarily to isolate the issue, so you can tell whether it's a connection issue with App Configuration or Key Vault.

BTW, if the issue is with refreshing, please make sure you call TryRefreshAsync in your Lambda call.

answered Aug 8, 2022 at 20:39

Zhenlan Wang

1,5539 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Raphael Ribeiro Over a year ago

I'll try the tips you said, ty =)

Vallalar_dev Over a year ago

Is there an approach to access AZ key vault from a GCP workload? Any samples for ref available to refer? Please advise.

Collectives™ on Stack Overflow

How to access Azure App Configuration key values from AWS Lambda function

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related