Program.cs for a .NET Core web application which uses service principal to connect to Azure Key Vault

Program.cs

public class Program
{
  public static void Main(string[] args)
  {
      CreateHostBuilder(args).Build().Run();
  }

  public static IHostBuilder CreateHostBuilder(string[] args) =>
      Host.CreateDefaultBuilder(args)
          .ConfigureAppConfiguration((context, config) =>
          {
              var keyVaultEndpoint = GetKeyVaultEndpoint();
              if (!string.IsNullOrEmpty(keyVaultEndpoint))
              {
                  // In below connection string, replace
                  // {ClientId} with actual GUID representing client id 
                  // {TenantId} with tenant id of Azure AD\
                  // {ClientSecret} with the client secret you generated
                  var connectionString = "RunAs=App;AppId={ClientId};TenantId={TenantId};AppKey={ClientSecret}";
                  
                  var azureServiceTokenProvider = new AzureServiceTokenProvider(connectionString);
                  var keyVaultClient = new KeyVaultClient(
                      new KeyVaultClient.AuthenticationCallback(
                          azureServiceTokenProvider.KeyVaultTokenCallback));
                  config.AddAzureKeyVault(keyVaultEndpoint, keyVaultClient, new DefaultKeyVaultSecretManager());
              }
          })
          .ConfigureWebHostDefaults(webBuilder =>
          {
              webBuilder.UseStartup<Startup>();
          });

  private static string GetKeyVaultEndpoint() => "https://<<your-key-vault>>.vault.azure.net";
}