Configuring and Fetching Secrets
- Fetch Secrets loads values into a per-environment, in-memory cache for the current session only.
- Secret values are never written to disk — only provider config and identifiers are saved.
-
Closing the app or collection clears the cache. Reopen Bruno and it will fetch secrets on demand.
-
Go to Environment > External Secrets and select the Azure Key Vault

-
You will see the configured Secret Manager accounts list from Preferences settings. Select Azure Key Vault account you want to use.
-
To learn more about Azure CLI Authentication

-
Enter a Name and the Vault Name for the secret you want to fetch.
-
Name - the alias used to reference the secret in Bruno, e.g.
apiCredentials - Vault Name - the name of the Azure Key Vault instance, e.g.
my-company-vault
{/* screenshot placeholder */}
-
Click the Fetch Secrets button in the top-right corner.
-
Fetched secret keys appear under Secret Keys. Values stay in the in-memory session cache and are not persisted to disk.
{/* screenshot placeholder */}
Use three dots menu to: - Edit account to edit the account details - Remove secret manager to remove the secret manager configuration