One of my favorite services in Azure is Key Vault [https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis], of which I have written about a while back [http://tomkerkhove.ghost.io/2015/07/22/securing-sensitive-data-with-azure-key-vault/] . Since then they even added support for creating, managing and monitoring your Azure Key Vault