Hi community,
Has anyone succeeded in pulling the expiration dates of Azure App Credentials (client-secret / certificate) directly into Dynatrace?
I’m not referring to secrets stored in Azure Key Vault (those are already covered by the Key Vault integration). I need to surface the expiry information that Azure exposes under:
Azure AD ➡ App registrations ➡ Certificates & secrets
Context
What I’ve tried
-
Azure Monitor Metrics/Logs – couldn’t find any metric or table that exposes credential expiry.
-
Dynatrace Extensions 2.0 – checked available extension libraries; none seem to target applications endpoints.
-
Custom API pull – considered building an Extension 2.0 that calls
GET https://graph.microsoft.com/v1.0/applications/{id}?$select=id,displayName,passwordCredentials
…but before investing time I’d like to know if there’s an existing solution or best practice.
Questions
-
Did you manage to ingest this data into Dynatrace (metric, log, or event)?
-
If so, which approach worked best (builtin integration, Extension 1.0/2.0, Synthetic Monitor)?
-
Any pitfalls around token scopes, rate limits, or schema mapping I should watch out for?
Thanks in advance for any insights or code snippets!
Best,
