KeyVault is ideal when combined with Managed Identities. I would not leverage any service that required a connection string to access a secret.