Example of injecting a decyption service and settings validator into the settings bridge

Startup.cs

        public void ConfigureServices(IServiceCollection services)
        {
            services.AddMvc();
            services.AddOptions();            
            services.Configure<MyAppSettings>(Configuration.GetSection("MyAppSettings"));
            services.AddSingleton(Configuration);        

            // In a real implementation, you would have a factory here to get the password and salt securely
            // from somewhere such as Azure Key Vault, Environmental variable / another json setting (obfuscated in some way)
            services.AddSingleton( x => new CryptoFactory().Create<AesManaged>("Password", "Salt"));
            services.AddSingleton<ISettingsDecrypt, SettingsDecryptor>();
            services.AddSingleton<ISettingsValidator, SettingsValidator>();
            services.AddScoped<IAppSettingsResolved, MyAppSettingsBridge>();
            // add the other interfaces implemented by MyAppSettingsBridge to allow for resolution by those interfaces (interface segregation)
            services.AddScoped<IAppSettings>(provider => provider.GetService<IAppSettingsResolved>());
            services.AddScoped<ISqlConnectionSettings>(provider => provider.GetService<IAppSettingsResolved>());
            services.AddScoped<IOracleConnectionSettings>(provider => provider.GetService<IAppSettingsResolved>());
        }