We decided to use an Azure App Configuration to store configs of backend. App Configuration can use Key Vault as secrets storage. We use connection string to connect from App Service to App Configuration. I configured references from an Azure App Configuration to Key Vault. After that I set access from App Service to Key