在 Azure 中，公钥保管库可以管理私有存储帐户的访问密钥吗？
我正在遵循一个场景，其中我创建了一个存储帐户并为其分配了一个专用终结点。我还通过防火墙设置对存储帐户应用了网络限制，以便无法通过互联网或任何其他网络访问它。 所以我想知道“公钥保管库是否能够管理（轮换或重新生成）此私人存储帐户的访问密钥？”。如果是这样，那么我该如何验证呢？
I am following a scenario where I have created a storage account and have assigned a private endpoint to it. I have also applied network restrictions on the storage account through firewall settings so that it cannot be accessed over internet or any other network.
So I want to know that "Will the public key vault be able to manage(rotate or regenerate) access keys of this private storage account?". If so, then how can I verify that?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
由于专用端点和防火墙用于隔离
存储帐户因此密钥保管库将无法工作，因为它不来
在 Microsoft 的可信服务下。
可信服务是那些即使在防火墙下也可以工作的服务。
但是可以通过专门授予对密钥保管库的 IP 地址的访问权限来规避此问题
请参阅以下 授予对防火墙下 IP 地址的访问权限的文档。
另请参阅以下文档，用于创建 Key Vault 托管存储帐户。
Since private endpoints and a firewall are used to isolate the
storage account thus the key vault won't work as it does not come
under the trusted services of Microsoft.
The trusted services are those services which can work even under a firewall.
But this can be circumvented by granting access specifically to the key vault's ip address
Refer the following documentation to grant access to IP addresses under firewall .
Also refer the following documentation to create a key vault managed storage account.