Skip to main content
Bruno integrates with Azure Key Vault to securely fetch secrets for use in your collections. The provider is configured once in Preferences and can then be attached to any collection environment. Two authentication methods are supported: Manual and Azure CLI.

​
Manual Configuration

  1. Go to Preferences settings and navigate to the Secrets Manager section.
  2. Click the + Add Secret Manager button.
  3. Select Azure Key Vault as the provider type.
  4. Enter your credentials:
    • Name - name of your secret manager account, e.g. Production Secrets
    • Tenant ID - your Azure Active Directory (AAD) tenant ID
    • Client ID - the AAD application (client) ID
    • Client Secret - the AAD client secret value
  5. Click Test Connection to verify the credentials.
  6. Click Add to save the provider.
azure-preference-config

​
Azure CLI

If you are already authenticated with az login, you can use your active session instead of entering credentials manually. For full setup steps see the Azure CLI Authentication guide.

​
Exporting as a .env file

Once a provider is saved, you can export its configuration as a .env file directly from Preferences > Secrets Manager. This is useful for passing credentials to the Bruno CLI or seeding a CI/CD pipeline without manually transcribing values.
  1. In the Secrets Manager list, hover over the account you want to export.
  2. Click the Export as .env icon (the square-with-arrow icon on the right).
  3. Bruno writes the credentials to a .env file on your machine.
export-as-env
The exported .env file contains your Azure credentials in plain text. Add it to .gitignore immediately and never commit it to version control.
Pass the exported file to the CLI using the --secrets-env-file flag:

​
Next Steps