last sync: 2025-Jun-13 17:56:51 Etc/UTC

Key Vault - Microsoft Azure Resource type
microsoft.keyvault/vaults

Azure Resource Provider Resource provider (RP) - Microsoft Key Vault [Microsoft.KeyVault]
RP Microsoft.KeyVault
RP display name Microsoft Key Vault
Azure Resource Type
RP Resource types
Resource types: 42
Azure Policy Alias
RP aliases
RP aliases: 180
Azure Policy definition
RP Azure Policy
Azure Policy definitions: 61
if: 61
then.deployment: 6
then.details: 0
then.existenceCondition: 6
then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations
RP RBAC operations: 122
RP RBAC operationType action: 51
RP RBAC operationType delete: 16
RP RBAC operationType read: 37
RP RBAC operationType write: 18
Azure RBAC Role definition
RP RBAC Roles & Operation actions
Unique RBAC Roles: 35
RBAC Roles with action operationType: 21
RBAC Roles with delete operationType: 11
RBAC Roles with read operationType: 32
RBAC Roles with write operationType: 11
Azure Application
RP related 1st party Service Principals
RP related 1st party Service Principals: 4
• Azure Managed HSM RP (appId: 1341df96-0b28-43da-ba24-7a6ce39be816) [ JSON;CSV]
• Azure Key Vault Managed HSM Key Governance Service (appId: a1b76039-a76c-499f-a2dd-846b4cc32627) [ JSON;CSV]
• Azure Key Vault Managed HSM (appId: 589d5083-6f11-4d30-a62a-a4b316a14abf) [ JSON;CSV]
• Azure Key Vault (appId: cfa8b339-82a2-471a-a3c9-0fc0be7a4093) [ JSON;CSV]
All Azure RPs Microsoft Learn
AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Key Vault [microsoft.keyvault/vaults]
RT information
RT microsoft.keyvault/vaults
RT display name Key Vault
RT type only
(without RP)
vaults
RT sub- Resource types sub-Resource types: 19
RT schema RT schema API versions: 18
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases
aliases: 52
Azure Policy definition
Azure Policy
Azure Policy definitions: 46
if: 46
then.deployment: 4
then.details: 0
then.existenceCondition: 4
then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations
RBAC operations: 6
RBAC operationType action: 3
RBAC operationType delete: 1
RBAC operationType read: 1
RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions
Unique RBAC Roles: 22
RBAC Roles with action operationType: 6
RBAC Roles with delete operationType: 6
RBAC Roles with read operationType: 21
RBAC Roles with write operationType: 6
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs
True
log-categories
Azure Resource Diagnostic settings metrics
Diagnostic metrics
True
metrics
Azure Customer-managed key
Customer-managed key (CMK) [experimental]
True
Microsoft Learn
Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity
False
Azure Resource Mover
Cross-ResourceGroup-Resource-Move
True
Azure Resource Mover
Cross-Subscription-Resource-Move
True
Azure Resource Tags
Tags
True
Azure Extension
Extension
False
Azure Private Endpoint
Private-Endpoint
True
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint
Supported Locations for Private-Endpoint: 45
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, chilecentral, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, jioindiawest, koreacentral, koreasouth, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Non supported Locations for Private-Endpoint Non supported Locations for Private-Endpoint: 15
malaysiawest, eastus2euap, brazilus, eastusstg, centraluseuap, southcentralusstg, southafricawest, australiacentral2, jioindiacentral, francesouth, germanynorth, norwaywest, switzerlandwest, uaecentral, brazilsoutheast
Azure location
Location
True
Azure Resource type location Azure Resource type location
Locations
Locations: 45
australiacentral, australiaeast, australiasoutheast, brazilsouth, canadacentral, canadaeast, centralindia, centralus, chilecentral, eastasia, eastus, eastus2, francecentral, germanywestcentral, indonesiacentral, israelcentral, italynorth, japaneast, japanwest, koreacentral, koreasouth, malaysiawest, mexicocentral, newzealandnorth, northcentralus, northeurope, norwayeast, polandcentral, qatarcentral, southafricanorth, southcentralus, southeastasia, southindia, spaincentral, swedencentral, switzerlandnorth, uaenorth, uksouth, ukwest, westcentralus, westeurope, westindia, westus, westus2, westus3
Not locations Not locations: 55
asia, asiapacific, australia, australiacentral2, brazil, brazilsoutheast, brazilus, canada, centraluseuap, centralusstage, eastasiastage, eastus2euap, eastus2stage, eastusstage, eastusstg, europe, france, francesouth, germany, germanynorth, global, india, indonesia, israel, italy, japan, jioindiacentral, jioindiawest, korea, malaysia, mexico, newzealand, northcentralusstage, norway, norwaywest, poland, qatar, singapore, southafrica, southafricawest, southcentralusstage, southcentralusstg, southeastasiastage, spain, sweden, switzerland, switzerlandwest, taiwan, uae, uaecentral, uk, unitedstates, unitedstateseuap, westus2stage, westusstage
Assessment tooling
Azure Advisor
Azure Advisor
Azure Advisor recommendations: 9
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 recommendations: 3
DisasterRecovery [High] Key vaults should have soft delete enabled
DisasterRecovery [Medium] Key vaults should have purge protection enabled
MonitoringAndAlerting [Low] Diagnostic logs in Key Vault should be enabled
PSRule for Azure
PSRule for Azure
PSRule for Azure rules: 10
Operational Excellence [Awareness] Use valid Key Vault Key names
Operational Excellence [Awareness] Use valid Key Vault names
Operational Excellence [Awareness] Use valid Key Vault Secret names
Reliability [Important] Use Key Vault Purge Protection
Reliability [Important] Use Key Vault Soft Delete
Security [Awareness] Use Azure role-based access control
Security [Important] Audit Key Vault Data Access
Security [Important] Configure Azure Key Vault firewall
Security [Important] Key Vault key rotation policy is not set
Security [Important] Limit access to Key Vault data
Azure Quick Review (AZQR)
Azure Quick Review (AZQR)
Azure Quick Review (AZQR) recommendations: 7
DisasterRecovery [High] Key vaults should have soft delete enabled
DisasterRecovery [Medium] Key vaults should have purge protection enabled
Governance [Low] Key Vault Name should comply with naming conventions
Governance [Low] Key Vault should have tags
HighAvailability [High] Key Vault should have a SLA
MonitoringAndAlerting [Low] Key Vault should have diagnostic settings enabled
Security [Medium] Private endpoint should be configured for Key Vault
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates
ARM (Azure Resource Manager) template API versions: 18
latest
Azure Bicep
Bicep templates
Bicep template API versions: 18
latest
Terraform
Terraform provider
Terraform providers: 3
key_vault
key_vault_access_policy
monitor_diagnostic_setting
AzAPI Terraform
AzAPI Terraform templates
AzAPI Terraform template API versions: 18
latest
Pulumi
Pulumi provider
Pulumi providers: 1
keyvault/vault
OpenTofu
OpenTofu provider
OpenTofu TF providers: 3
key_vault
key_vault_access_policy
monitor_diagnostic_setting
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep
Key Vault - Secret
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform
• GitHub: Key Vault
• Terraform registry: Key Vault
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 19
2024-12-01-preview
2024-11-01
2024-04-01-preview
2023-08-01-PREVIEW
2023-07-01
2023-02-01
2022-11-01
2022-07-01
2022-02-01-preview
2021-11-01-preview
2021-10-01
2021-06-01-preview
2021-04-01-preview
2020-04-01-preview
2019-09-01
2018-02-14-preview
2018-02-14
2016-10-01
2015-06-01
REST-API version default 2019-09-01
API profiles API profiles: 4
2018-03-01-hybrid
2016-10-01;2019-03-01-hybrid
2016-10-01;2018-06-01-profile
2016-10-01
Resource naming
Azure Naming Tool
Azure Naming Tool
The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details
{
  "property": "",
  "ShortName": "kv",
  "scope": "global",
  "lengthMin": "3",
  "lengthMax": "24",
  "validText": "Alphanumerics and hyphens. Start with letter. End with letter or number.",
  "invalidText": "Can't contain consecutive hyphens.",
  "invalidCharacters": "",
  "invalidCharactersStart": "",
  "invalidCharactersEnd": "",
  "invalidCharactersConsecutive": "-",
  "regx": "^(?!.*-{2}.*)([a-zA-Z][a-zA-Z0-9-]{1,22}[a-zA-Z0-9])$",
  "staticValues": ""
}