---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# azure_key_vault{% #azure_key_vault %}

## `create_mode`{% #create_mode %}

**Type**: `STRING`**Provider name**: `properties.createMode`**Description**: The vault's create mode to indicate whether the vault need to be recovered or not.

## `diagnostic_settings`{% #diagnostic_settings %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `DiagnosticSettingsResource`

- `event_hub_authorization_rule_id`**Type**: `STRING`**Provider name**: `properties.eventHubAuthorizationRuleId`**Description**: The resource Id for the event hub authorization rule.
- `event_hub_name`**Type**: `STRING`**Provider name**: `properties.eventHubName`**Description**: The name of the event hub. If none is specified, the default event hub will be selected.
- `id`**Type**: `STRING`**Provider name**: `id`**Description**: Azure resource Id
- `log_analytics_destination_type`**Type**: `STRING`**Provider name**: `properties.logAnalyticsDestinationType`**Description**: A string indicating whether the export to Log Analytics should use the default destination type, i.e. AzureDiagnostics, or use a destination type constructed as follows:_. Possible values are: Dedicated and null (null is default.)
- `logs`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `properties.logs`**Description**: The list of logs settings.
  - `category`**Type**: `STRING`**Provider name**: `category`**Description**: Name of a Diagnostic Log category for a resource type this setting is applied to. To obtain the list of Diagnostic Log categories for a resource, first perform a GET diagnostic settings operation.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: a value indicating whether this log is enabled.
  - `retention_policy`**Type**: `STRUCT`**Provider name**: `retentionPolicy`**Description**: the retention policy for this log.
    - `days`**Type**: `INT32`**Provider name**: `days`**Description**: the number of days for the retention in days. A value of 0 will retain the events indefinitely.
    - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: a value indicating whether the retention policy is enabled.
- `metrics`**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `properties.metrics`**Description**: The list of metric settings.
  - `category`**Type**: `STRING`**Provider name**: `category`**Description**: Name of a Diagnostic Metric category for a resource type this setting is applied to. To obtain the list of Diagnostic metric categories for a resource, first perform a GET diagnostic settings operation.
  - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: a value indicating whether this category is enabled.
  - `retention_policy`**Type**: `STRUCT`**Provider name**: `retentionPolicy`**Description**: the retention policy for this category.
    - `days`**Type**: `INT32`**Provider name**: `days`**Description**: the number of days for the retention in days. A value of 0 will retain the events indefinitely.
    - `enabled`**Type**: `BOOLEAN`**Provider name**: `enabled`**Description**: a value indicating whether the retention policy is enabled.
  - `time_grain`**Type**: `STRING`**Provider name**: `timeGrain`**Description**: the timegrain of the metric in ISO8601 format.
- `name`**Type**: `STRING`**Provider name**: `name`**Description**: Azure resource name
- `service_bus_rule_id`**Type**: `STRING`**Provider name**: `properties.serviceBusRuleId`**Description**: The service bus rule Id of the diagnostic setting. This is here to maintain backwards compatibility.
- `storage_account_id`**Type**: `STRING`**Provider name**: `properties.storageAccountId`**Description**: The resource ID of the storage account to which you would like to send Diagnostic Logs.
- `type`**Type**: `STRING`**Provider name**: `type`**Description**: Azure resource type
- `workspace_id`**Type**: `STRING`**Provider name**: `properties.workspaceId`**Description**: The full ARM resource ID of the Log Analytics workspace to which you would like to send Diagnostic Logs. Example: /subscriptions/4b9e8510-67ab-4e9a-95a9-e2f1e570ea9c/resourceGroups/insights-integration/providers/Microsoft.OperationalInsights/workspaces/viruela2

## `enable_purge_protection`{% #enable_purge_protection %}

**Type**: `BOOLEAN`**Provider name**: `properties.enablePurgeProtection`**Description**: Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.

## `enable_rbac_authorization`{% #enable_rbac_authorization %}

**Type**: `BOOLEAN`**Provider name**: `properties.enableRbacAuthorization`**Description**: Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.

## `enable_soft_delete`{% #enable_soft_delete %}

**Type**: `BOOLEAN`**Provider name**: `properties.enableSoftDelete`**Description**: Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.

## `enabled_for_deployment`{% #enabled_for_deployment %}

**Type**: `BOOLEAN`**Provider name**: `properties.enabledForDeployment`**Description**: Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.

## `enabled_for_disk_encryption`{% #enabled_for_disk_encryption %}

**Type**: `BOOLEAN`**Provider name**: `properties.enabledForDiskEncryption`**Description**: Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.

## `enabled_for_template_deployment`{% #enabled_for_template_deployment %}

**Type**: `BOOLEAN`**Provider name**: `properties.enabledForTemplateDeployment`**Description**: Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.

## `id`{% #id %}

**Type**: `STRING`**Provider name**: `id`**Description**: Fully qualified identifier of the key vault resource.

## `location`{% #location %}

**Type**: `STRING`**Provider name**: `location`**Description**: Azure location of the key vault resource.

## `name`{% #name %}

**Type**: `STRING`**Provider name**: `name`**Description**: Name of the key vault resource.

## `provisioning_state`{% #provisioning_state %}

**Type**: `STRING`**Provider name**: `properties.provisioningState`**Description**: Provisioning state of the vault.

## `resource_group`{% #resource_group %}

**Type**: `STRING`

## `sku`{% #sku %}

**Type**: `STRUCT`**Provider name**: `properties.sku`**Description**: SKU details

- `family`**Type**: `STRING`**Provider name**: `family`**Description**: SKU family name
- `name`**Type**: `STRING`**Provider name**: `name`**Description**: SKU name to specify whether the key vault is a standard vault or a premium vault.

## `soft_delete_retention_in_days`{% #soft_delete_retention_in_days %}

**Type**: `INT64`**Provider name**: `properties.softDeleteRetentionInDays`**Description**: softDelete data retention days. It accepts >=7 and <=90.

## `subscription_id`{% #subscription_id %}

**Type**: `STRING`

## `subscription_name`{% #subscription_name %}

**Type**: `STRING`

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `tenant_id`{% #tenant_id %}

**Type**: `STRING`**Provider name**: `properties.tenantId`**Description**: The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.

## `type`{% #type %}

**Type**: `STRING`**Provider name**: `type`**Description**: Resource type of the key vault resource.

## `vault_uri`{% #vault_uri %}

**Type**: `STRING`**Provider name**: `properties.vaultUri`**Description**: The URI of the vault for performing operations on keys and secrets. This property is readonly