Key Vaults should be used to store secrets, credentials, and keys. There should not be any secrets, credentials, and keys visible in either an ARM template or its parameters file. The previous chapter on design patterns shows two different ways to use Azure Key Vaults for the storage and usage of secrets.