Azure Key Vault Security Incidents Incident Runbooks

Azure Key Vault Secret Reads Return 403 After a Workload Identity Change

Determine whether Azure Key Vault 403 responses come from identity, RBAC, firewall, or private DNS changes and restore least-privilege secret access.