Key Vault references now available in App Configuration

App Configuration and Key Vault are complementary services, which will be used side by side in most application deployments. To help you use them together, App Configuration allows you to create keys that reference values stored in Key Vault.

When you do this, App Configuration stores the URI to the Key Vault value, rather than the value itself. Your application retrieves the value of this key using the App Configuration client provider, just like any other key stored in App Configuration. The client provider recognizes it as a Key Vault reference, and calls out to Key Vault to retrieve the value.

Your application is responsible for authenticating properly to both App Configuration and Key Vault. The two services don't communicate directly.

For more information, please see our [tutorial on using Key Vault references](https://docs.microsoft.com/en-us/azure/azure-app-configuration/use-key-vault-references-dotnet-core). If you're interested in using managed identity with App Config and Key Vault, please see [Integrate with Azure managed identities](https://docs.microsoft.com/en-us/azure/azure-app-configuration/howto-integrate-azure-managed-service-identity), which now covers Key Vault in addition to App Config.