Application data encrypt using Azure KMS Key Vault

Anyone did the field encryption using azure KMS key vault ?

I tried it with persopnal Azure account but I’m getting below error while connecting through the keystore. Think I missed something in Azure side but not able to figure out.

com.azure.core.exception.ResourceModifiedException: Status code 403, "{“error”:{“code”:“Forbidden”,“message”:"Caller is not authorized to perform action on resource.\r\nIf role assignments, deny assignments or role definitions were changed recently, please observe propagation time.

@MAX0716

The error message you’re seeing indicates that the caller (in this case, your Pega Platform instance) is not authorized to perform the requested action on the Azure Key Vault resource. This is typically due to insufficient permissions.

In Azure, permissions are managed through role assignments. You need to ensure that the application (or user) that you’re using to connect to Azure Key Vault from Pega Platform has the necessary role assignments to perform the required actions (like read, write, list, etc.) on the Key Vault.

Please check your Azure Key Vault settings and ensure that the correct permissions have been granted. If changes were made recently, please note that it may take some time for the changes to propagate through Azure.

:warning: This is a GenAI-powered tool. All generated answers require validation against the provided references.

Configuring a Microsoft Azure Key Vault keystore