Azure Key Vault
Securely store and manage secrets, keys, and certificates in Azure.
When to Use This Skill
Use this skill when:
-
Managing secrets in Azure
-
Storing encryption keys
-
Managing SSL certificates
-
Integrating with Azure services
Prerequisites
-
Azure subscription
-
Azure CLI installed
-
Appropriate RBAC permissions
Basic Operations
Create Key Vault
az keyvault create --name mykeyvault --resource-group mygroup --location eastus
Set secret
az keyvault secret set --vault-name mykeyvault --name db-password --value "secret123"
Get secret
az keyvault secret show --vault-name mykeyvault --name db-password
List secrets
az keyvault secret list --vault-name mykeyvault
Application Integration
from azure.identity import DefaultAzureCredential from azure.keyvault.secrets import SecretClient
credential = DefaultAzureCredential() client = SecretClient(vault_url="https://mykeyvault.vault.azure.net/", credential=credential)
Get secret
secret = client.get_secret("db-password") print(secret.value)
Kubernetes Integration
apiVersion: secrets-store.csi.x-k8s.io/v1 kind: SecretProviderClass metadata: name: azure-keyvault spec: provider: azure parameters: keyvaultName: "mykeyvault" objects: | array: - | objectName: db-password objectType: secret tenantId: "tenant-id"
Best Practices
-
Use managed identities
-
Enable soft-delete and purge protection
-
Implement access policies carefully
-
Use private endpoints
-
Monitor with Azure Monitor
Related Skills
-
hashicorp-vault - Multi-cloud secrets
-
azure-networking - Network security