Skip to content

Latest commit

 

History

History
99 lines (80 loc) · 2.74 KB

keyvault.md

File metadata and controls

99 lines (80 loc) · 2.74 KB

KeyVault

Azure's secrets service · portable interface driver.Secrets · Azure index

Operations (7)

Operation Description
CreateSecret
DeleteSecret
GetSecret
GetSecretValue
ListSecretVersions
ListSecrets
PutSecretValue

Optional capabilities

Discovered by type assertion; only some providers implement these.

KeyVaultCertificates

KeyVaultCertificates is the Azure Key Vault-specific certificate data-plane

Operation Description
CreateCertificate
DeleteCertificate
GetCertificate
GetDeletedCertificate
ListCertificateVersions
ListCertificates
ListDeletedCertificates
PurgeDeletedCertificate
RecoverDeletedCertificate

KeyVaultKeys

KeyVaultKeys is the Azure Key Vault keys data-plane surface: key lifecycle

Operation Description
CreateKey
DecryptKey
DeleteKey
EncryptKey
GetDeletedKey
GetKey
GetKeyRotationPolicy
ImportKey
ListDeletedKeys
ListKeyVersions
ListKeys
PurgeDeletedKey
RecoverDeletedKey
RotateKey
SignKey
UnwrapKey
UpdateKey
UpdateKeyRotationPolicy
VerifyKey
WrapKey

KeyVaultSecrets

KeyVaultSecrets is the Azure Key Vault-specific secret surface: per-version

Operation Description
BackupKeyVaultSecret
DeleteKeyVaultSecret
GetDeletedKeyVaultSecret
GetKeyVaultSecret
ListDeletedKeyVaultSecrets
ListKeyVaultSecretVersions
ListKeyVaultSecrets
PurgeDeletedKeyVaultSecret
RecoverDeletedKeyVaultSecret
RestoreKeyVaultSecret
SetKeyVaultSecret
UpdateKeyVaultSecret

KeyVaultVaults

KeyVaultVaults is the Azure Key Vault control-plane (ARM) surface

Operation Description
CreateOrUpdateVault CreateOrUpdateVault creates a vault, or replaces the properties/tags of an
DeleteVault DeleteVault removes a vault by name.
GetVault GetVault returns the vault by name, regardless of scope. Scope enforcement
ListVaults ListVaults returns the vaults visible under the given scope filter (a zero
UpdateVault UpdateVault atomically applies mutate to a copy of the stored vault
UpdateVaultAccessPolicies UpdateVaultAccessPolicies atomically adds, replaces or removes access

Not in scope

Not documented yet. See the emulator boundary for cloudemu-wide non-goals.