您误解了Key Vault.从某种意义上讲，密钥库是安全的，因为没有任何东西可以通过公共互联网传输，与密钥库和Azure资源的所有通信都通过Azure骨干网进行，因此默认情况下它们是安全的(如果您认为Azure是安全的，那么是安全的).
同样，使用Key Vault，您可以允许部署某些证书，而无需查看(或复制)它们.基本上，它支持RBAC.

You are misunderstanding the Key Vault. Key vault is secure in a sense that nothing gets transmitted over the public internet, all the communications with Key Vault and Azure Resources go through the Azure Backbone, so they are secure by default (well, if you believe Azure is secure).
Also, with Key Vault you can allow for deploying certain certificates without having the ability to look at them (or copy them). Basically, it supports RBAC.