Azure Key Vault Secret from Fabric Notebooks and Pipelines

I am trying to access a Azure Key Vault secret from a Fabric Notebook and/or a Fabric pipeline but keep running into issues. For both scenarios I get a "ForbiddenByFirewall" error.

The azure key vault is under a private endpoint but fabric is not. After some extensive research, I think if we whitelist the fabric IPs in the Azure Key Vault Network settings and adjust the Access policies to include Fabric as a trusted service this might solve the issue. However I don't see Microsoft Fabric as a Trusted Service in the documentation here https://learn.microsoft.com/en-us/azure/key-vault/general/overview-vnet-service-endpoints. I see Azure Synapse Analytics but not Fabric. Any thoughts and/or suggestions?

4 comments