Does anyone have a good azure service for config management? I'd like to export all my config (endpoints, secrets, connection strings, hostnames etc...) to have 1 consolidated place, currently, it's spread over 10 odd pulumi stacks In AWS, I'd use SSM Parameter store, but Azure App Configuraton is 1) not supported by Terraform or Pulumi and 2) expensive

The best service for this would be Azure Key Vault.

I was afraid that would be the answer 🙂

That UX depends on how you do it. Plus, if you don't care about encryption of values in the UI / API then maybe cosmos DB or storage accounts tables might be enough https://docs.microsoft.com/en-us/azure/cosmos-db/table-storage-overview

must be encrypted & hidden and RBAC'd for secrets

In which case it'll be Key Vault. Understand though that RBAC (for now) only works on the vault, not on secrets.