title: Securing sensitive information in Azure Cloud Service Configuration
body: <p>We are using <a href="https://docs.microsoft.com/en-us/previous-versions/azure/reference/jj156212(v%3Dazure.100)" rel="noreferrer">Cloud Service configuration</a> to store app settings. But we would like to secure few appsettings like User Credentials,database connection string etc. What is the recommended way to do that?</p>
  
  <p>We are reading this configuration from both web and worker role. Hence using <a href="https://msdn.microsoft.com/en-us/library/dtkwfdky(v=vs.100).aspx" rel="noreferrer">aspnet_regiis</a> utility is not an option as this is not available in worker role since iis is not installed in worker role.</p>
  
  <p>We also considered using Key vault, but we end up in the same situation of securing the key vault key.</p>
  
  <p>Unfortunately, Azure cloud service does not support <a href="https://azure.microsoft.com/en-in/blog/keep-credentials-out-of-code-introducing-azure-ad-managed-service-identity/" rel="noreferrer">managed service indentities</a> </p>