az keyvault

Manage KeyVault keys, secrets, and certificates. Azure CLI reference

28 commands 14 options Its page in the Azure CLI reference

Commands

28, each with its page

backupManage full HSM backup.certificateManage certificates.check-nameCheck that the given name is valid and is not already in use.createCreate a Vault or HSM.deleteDelete a Vault or HSM.delete-policyDelete security policy settings for a Key Vault.ekm-connectionManage External Key Manager (EKM) connection for a Managed HSM.keyManage keys.listList Vaults and/or HSMs.list-deletedGet information about the deleted Vaults or HSMs in a subscription.network-ruleManage network ACLs for vault or managed hsm.private-endpoint-connectionManage vault/HSM private endpoint connections.private-link-resourceManage vault/HSM private link resources.purgePermanently delete the specified Vault or HSM.recoverRecover a Vault or HSM.regionManage MHSM multi-regions.restoreManage full HSM restore.roleManage user roles for access control.secretManage secrets.security-domainManage security domain operations.set-policyUpdate security policy settings for a Key Vault.settingManage MHSM settings.showShow details of a Vault or HSM.show-deletedShow details of a deleted Vault or HSM.updateUpdate the properties of a Vault.update-hsmUpdate the properties of a HSM.waitPlace the CLI in a waiting state until a condition of the Vault is met.wait-hsmPlace the CLI in a waiting state until a condition of the HSM is met.

Options

14 in the Azure CLI reference

--bypassBypass traffic for space-separated uses.

--default-actionDefault action to apply when no rule matches.

--enable-purge-protectionProperty specifying whether protection against purge is enabled for this vault/managed HSM pool.

--enable-rbac-authorizationProperty that controls how data actions are authorized.

--enabled-for-deployment[Vault Only] Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.

--enabled-for-disk-encryption[Vault Only] Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.

--enabled-for-template-deployment[Vault Only] Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.

--name, -nName of the Vault.

--object-ida GUID that identifies the principal that will receive permissions

--public-network-accessControl permission for data plane traffic coming from public networks while private endpoint is enabled

--resource-group, -gName of resource group.

--spnname of a service principal that will receive permissions

--tagsspace-separated tags: key[=value] [key[=value] ...].

--upnname of a user principal that will receive permissions