topic Re: Azure Key Vault monitoring - Alert on secret failure in Alerting

Azure Key Vault monitoring - Alert on secret failure

DStockland — Mon, 30 Sep 2024 14:43:33 GMT

Hello,

My team is working to integrate AKV with Dynatrace. We have the implementation configured and are seeing metrics on the key vault itself. I know I can set alerting for backend services, app pool failures, synthetics etc... but, I was curious if anyone knows if there's a way to alert when pulling a secret fails. Trying to get as many hooks in as I can. First time performing this type of integration.

Any help is appreciated and I'd be happy to share any extra info you all may have.

Regards,

Re: Azure Key Vault monitoring - Alert on secret failure

GosiaMurawska — Tue, 17 Dec 2024 10:24:55 GMT

Hi @DStockland, did you manage to work this out? It would be great if you share it with the Community 🙂

Re: Azure Key Vault monitoring - Alert on secret failure

DStockland — Tue, 17 Dec 2024 17:34:03 GMT

Hi @GosiaMurawska! I'm not 100% sure this is the correct solution, but what we did was we synchronized with the external vault (https://docs.dynatrace.com/docs/observe/digital-experience/synthetic-monitoring/general-information/external-vault-integration#azure-key-vault). This in turn creates a http monitor between Dynatrace and Azure Key Vault. If DT fails to update its secrets, we send out an alert.

We also looked into creating a custom alert that looked at the AKV service, but there is not enough verbose info coming from the application that could make a solid determination (at this time) that it failed to pull a secret.

Hope this helps!