last sync: 2025-Apr-29 17:44:12 Etc/UTC

Key Vault - Microsoft Azure Resource type
microsoft.keyvault/vaults

Azure Resource Provider Resource provider (RP) - Microsoft Key Vault [Microsoft.KeyVault]
RP Microsoft.KeyVault
RP display name Microsoft Key Vault
Azure Resource Type
RP Resource types
Resource types: 42
Azure Policy Alias
RP aliases
RP aliases: 180
Azure Policy definition
RP Azure Policy
Azure Policy definitions: 61
if: 61
then.deployment: 6
then.details: 0
then.existenceCondition: 6
then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations
RP RBAC operations: 122
RP RBAC operationType action: 51
RP RBAC operationType delete: 16
RP RBAC operationType read: 37
RP RBAC operationType write: 18
Azure RBAC Role definition
RP RBAC Roles & Operation actions
Unique RBAC Roles: 35
RBAC Roles with action operationType: 21
RBAC Roles with delete operationType: 11
RBAC Roles with read operationType: 32
RBAC Roles with write operationType: 11
Azure Application
RP related 1st party Service Principals
RP related 1st party Service Principals: 4
• Azure Managed HSM RP (appId: 1341df96-0b28-43da-ba24-7a6ce39be816) [ JSON;CSV]
• Azure Key Vault Managed HSM Key Governance Service (appId: a1b76039-a76c-499f-a2dd-846b4cc32627) [ JSON;CSV]
• Azure Key Vault Managed HSM (appId: 589d5083-6f11-4d30-a62a-a4b316a14abf) [ JSON;CSV]
• Azure Key Vault (appId: cfa8b339-82a2-471a-a3c9-0fc0be7a4093) [ JSON;CSV]
All Azure RPs Microsoft Learn
AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Key Vault [microsoft.keyvault/vaults]
RT information
RT microsoft.keyvault/vaults
RT display name Key Vault
RT type only
(without RP)
vaults
RT sub- Resource types sub-Resource types: 19
RT schema RT schema API versions: 18
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases
aliases: 52
Azure Policy definition
Azure Policy
Azure Policy definitions: 46
if: 46
then.deployment: 4
then.details: 0
then.existenceCondition: 4
then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations
RBAC operations: 6
RBAC operationType action: 3
RBAC operationType delete: 1
RBAC operationType read: 1
RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions
Unique RBAC Roles: 22
RBAC Roles with action operationType: 6
RBAC Roles with delete operationType: 6
RBAC Roles with read operationType: 21
RBAC Roles with write operationType: 6
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs
True
log-categories
Azure Resource Diagnostic settings metrics
Diagnostic metrics
True
metrics
Azure Customer-managed key
Customer-managed key (CMK) [experimental]
True
Microsoft Learn
Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity
False
Azure Resource Mover
Cross-ResourceGroup-Resource-Move
True
Azure Resource Mover
Cross-Subscription-Resource-Move
True
Azure Resource Tags
Tags
True
Azure Extension
Extension
False
Azure Private Endpoint
Private-Endpoint
True
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint
Supported Locations for Private-Endpoint: 44
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, jioindiawest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Non supported Locations for Private-Endpoint Non supported Locations for Private-Endpoint: 14
brazilus, eastusstg, centraluseuap, eastus2euap, southcentralusstg, southafricawest, australiacentral2, jioindiacentral, francesouth, germanynorth, norwaywest, switzerlandwest, uaecentral, brazilsoutheast
Azure location
Location
True
Azure Resource type location Azure Resource type location
Locations
Locations: 43
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Not locations Not locations: 54
asia, asiapacific, australia, australiacentral2, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francesouth, germany, germanynorth, global, india, indonesia, israel, italy, japan, jioindiacentral, jioindiawest, korea, mexico, newzealand, northcentralusstage, norway, norwaywest, poland, qatar, singapore, southafrica, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, spain, sweden, switzerland, switzerlandwest, taiwan, uae, uaecentral, uk, unitedstates, unitedstateseuap, westus2stage, westusstage
Assessment tooling
Azure Advisor
Azure Advisor
Azure Advisor recommendations: 9
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 recommendations: 3
DisasterRecovery [High] Key vaults should have soft delete enabled
DisasterRecovery [Medium] Key vaults should have purge protection enabled
MonitoringAndAlerting [Low] Diagnostic logs in Key Vault should be enabled
PSRule for Azure
PSRule for Azure
PSRule for Azure rules: 10
Operational Excellence [Awareness] Use valid Key Vault Key names
Operational Excellence [Awareness] Use valid Key Vault names
Operational Excellence [Awareness] Use valid Key Vault Secret names
Reliability [Important] Use Key Vault Purge Protection
Reliability [Important] Use Key Vault Soft Delete
Security [Awareness] Use Azure role-based access control
Security [Important] Audit Key Vault Data Access
Security [Important] Configure Azure Key Vault firewall
Security [Important] Key Vault key rotation policy is not set
Security [Important] Limit access to Key Vault data
Azure Quick Review (AZQR)
Azure Quick Review (AZQR)
Azure Quick Review (AZQR) recommendations: 7
DisasterRecovery [High] Key vaults should have soft delete enabled
DisasterRecovery [Medium] Key vaults should have purge protection enabled
Governance [Low] Key Vault Name should comply with naming conventions
Governance [Low] Key Vault should have tags
HighAvailability [High] Key Vault should have a SLA
MonitoringAndAlerting [Low] Key Vault should have diagnostic settings enabled
Security [Medium] Private endpoint should be configured for Key Vault
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates
ARM (Azure Resource Manager) template API versions: 18
latest
Azure Bicep
Bicep templates
Bicep template API versions: 18
latest
Terraform
Terraform provider
Terraform providers: 3
key_vault
key_vault_access_policy
monitor_diagnostic_setting
AzAPI Terraform
AzAPI Terraform templates
AzAPI Terraform template API versions: 18
latest
Pulumi
Pulumi provider
Pulumi providers: 1
keyvault/vault
OpenTofu
OpenTofu provider
OpenTofu TF providers: 3
key_vault
key_vault_access_policy
monitor_diagnostic_setting
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep
Key Vault
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform
• GitHub: Key Vault
• Terraform registry: Key Vault
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 19
2024-12-01-preview
2024-11-01
2024-04-01-preview
2023-08-01-PREVIEW
2023-07-01
2023-02-01
2022-11-01
2022-07-01
2022-02-01-preview
2021-11-01-preview
2021-10-01
2021-06-01-preview
2021-04-01-preview
2020-04-01-preview
2019-09-01
2018-02-14-preview
2018-02-14
2016-10-01
2015-06-01
REST-API version default 2019-09-01
API profiles API profiles: 4
2018-03-01-hybrid
2016-10-01;2019-03-01-hybrid
2016-10-01;2018-06-01-profile
2016-10-01
Resource naming
Azure Naming Tool
Azure Naming Tool
The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details
{
  "property": "",
  "ShortName": "kv",
  "scope": "global",
  "lengthMin": "3",
  "lengthMax": "24",
  "validText": "Alphanumerics and hyphens. Start with letter. End with letter or number.",
  "invalidText": "Can't contain consecutive hyphens.",
  "invalidCharacters": "",
  "invalidCharactersStart": "",
  "invalidCharactersEnd": "",
  "invalidCharactersConsecutive": "-",
  "regx": "^(?!.*-{2}.*)([a-zA-Z][a-zA-Z0-9-]{1,22}[a-zA-Z0-9])$",
  "staticValues": ""
}