The AzureKeyVaultSecretsParameterProvider maps a Secret to a Parameter, which can be grouped by adding a "group-name" tag. To create a compatible secret from the Azure Portal:
Alternatively, from the command line, run a command like the following once you have a Key Vault:
az keyvault secret set --vault-name [Vault Name] --name [Parameter Name] --value [Parameter Value] --tags group-name=[Parameter Group Name]
In this example, [Parameter Group Name] should be the intended name of the Parameter Group, [Parameter Name] should be the parameter name, and [Parameter Value] should be the value of the parameter. [Vault Name] should be the name you chose for your Key Vault in Azure
Azure Key Vault Secrets must be explicitly matched in the "Group Name Pattern" property in order for them to be fetched. This prevents more than the intended Secrets from being pulled into NiFi.