Key Vault

Docs > DDSQL Reference > Data Directory > Key Vault

This table represents the Key Vault resource from Microsoft Azure.

azure.key_vault

Fields

ID	Type	Data Type	Description
_key	core	string
create_mode	core	string	The vault's create mode to indicate whether the vault need to be recovered or not.
diagnostic_settings	core	json
enable_purge_protection	core	bool	Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.
enable_rbac_authorization	core	bool	Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.
enable_soft_delete	core	bool	Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.
enabled_for_deployment	core	bool	Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
enabled_for_disk_encryption	core	bool	Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
enabled_for_template_deployment	core	bool	Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
id	core	string	Fully qualified identifier of the key vault resource.
location	core	string	Azure location of the key vault resource.
name	core	string	Name of the key vault resource.
provisioning_state	core	string	Provisioning state of the vault.
resource_group	core	string
sku	core	json	SKU details
soft_delete_retention_in_days	core	int64	softDelete data retention days. It accepts >=7 and <=90.
subscription_id	core	string
subscription_name	core	string
tags	core	hstore
tenant_id	core	string	The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
type	core	string	Resource type of the key vault resource.
vault_uri	core	string	The URI of the vault for performing operations on keys and secrets. This property is readonly