One of my favorite services in Azure is Key Vault
[https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis], of which I
have written about a while back
[http://tomkerkhove.ghost.io/2015/07/22/securing-sensitive-data-with-azure-key-vault/]
.
Since then they even added support for creating, managing and monitoring your
Azure Key Vault