Azure Key Vault monitoring - Alert on secret failure

[DStockland]

Hello,

My team is working to integrate AKV with Dynatrace.  We have the implementation configured and are seeing metrics on the key vault itself.  I know I can set alerting for backend services, app pool failures, synthetics etc... but, I was curious if anyone knows if there's a way to alert when pulling a secret fails.  Trying to get as many hooks in as I can.  First time performing this type of integration.

Any help is appreciated and I'd be happy to share any extra info you all may have.

Regards,

DS

[GosiaMurawska]

Hi @DStockland, did you manage to work this out? It would be great if you share it with the Community 🙂

[DStockland · Accepted solution]

Hi @GosiaMurawska!  I'm not 100% sure this is the correct solution, but what we did was we synchronized with the external vault (https://docs.dynatrace.com/docs/observe/digital-experience/synthetic-monitoring/general-information/...).  This in turn creates a http monitor between Dynatrace and Azure Key Vault.  If DT fails to update its secrets, we send out an alert.

We also looked into creating a custom alert that looked at the AKV service, but there is not enough verbose info coming from the application that could make a solid determination (at this time) that it failed to pull a secret.

Hope this helps!