I have encountered a problem related to Azure KeyVault secrets rotation and would greatly appreciate any guidance or assistance.
The rotation process was carried out as per the schedule, beginning with one of the lower environments: DEV, and then was attempted on QA. However, after the completion of this process, an error was observed while loading an Azure Function App. Here’s the error message:
Azure.Storage.Blobs: Server failed to authenticate the request. Make
sure the value of Authorization header is formed correctly including
the signature. RequestId:xxxx Time:2024-06-05T06:01:05.0133915Z
Status: 403 (Server failed to authenticate the request. Make sure the
value of Authorization header is formed correctly including the
signature.) ErrorCode: AuthenticationFailed Additional Information:
AuthenticationErrorDetail: The MAC signature found in the HTTP request
‘yyyyyyy=’ is not the same as any computed signature. Server used
following string to sign: ‘GET x-ms-client-request-id:xyxyxyxyxy
x-ms-date:Wed, 05 Jun 2024 06:01:04 GMT
x-ms-return-client-request-id:true x-ms-version:2021-08-06
/demofunapp/azure-webjobs-secrets restype:container’.
The Azure Function App in question has a dependency on Azure Storage, which retrieves the connection string from the Azure KeyVault. This is achieved through a key located in the Environment Variables section of the Azure Portal that reads the value from the Azure KeyVault. Notably, there have been no recent changes to the code or infrastructure.
I am not sure as to why this issue has arisen and am seeking your expertise in understanding how to resolve it. Any insights, advice, or potential solutions would be greatly appreciated.
Can anyone please help me here by providing their guidance. Any help would be greatly appreciated.