Referencing an Azure Key Vault secret from a flow, and how Service Bus posting is authorised
This sheet compares Secret environment variable, Plain column or Text variable, Hardcoded in the flow.
| Criterion | Secret environment variable | Plain column or Text variable | Hardcoded in the flow |
|---|---|---|---|
| Security | References Key Vault, supports central rotation | Plain text, no Key Vault RBAC | Exposed in the flow definition and run history |
The verdict, the full comparison, 3 rules and 2 traps are part of PL-400 access. Unlock PL-400.