Azure Key Vault

Securely store and manage secrets, keys, and certificates in Azure.

Prerequisites

• Azure subscription with appropriate permissions
• Azure CLI installed (az command)
• Control-plane vault-management permission and separate least-privilege data-plane roles; assigning roles additionally needs authorized role-assignment permission
• Managed identity configured for application access
• Understanding of Azure RBAC vs. Key Vault access policies

Vault Creation and Configuration

# Create a resource group
az group create --name rg-secrets --location eastus