Secure Storage Account Key in Azure Keyvault

azuredeploy.json

{
    "type": "Microsoft.KeyVault/vaults/secrets",
    "name": "[concat(variables('keyvault_name'), '/', 'StorageAccountKey')]",
    "apiVersion": "2016-10-01",
    "location": "uksouth",
    "scale": null,
    "properties": {
        "value": "[listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName')), '2016-01-01').keys[0].value]",
        "contentType": "string",
        "attributes": {
            "enabled": true
        }
    },
    "dependsOn": [
        "[resourceId('Microsoft.KeyVault/vaults', variables('keyvault_name'))]",
        "[resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName'))]"
    ]
}