Azure_Cloud_Shell/Create_a_key_vault.azcli at master · tomwechsler/Azure_Cloud_Shell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
az login

az account show

az account list --all --output table

az account set --subscription "MSDN Platforms"

#Create a resource group
az group create --name "myResourceGroup" -l "westeurope"

#Create a key vault
az keyvault create --name "twkvdemo2020" --resource-group "myResourceGroup" --location "westeurope"

#Add a secret to Key Vault
az keyvault secret set --vault-name "twkvdemo2020" --name "ExamplePassword" --value "hVFkk965BuUv"

#View the value contained in the secret as plain text
az keyvault secret show --name "ExamplePassword" --vault-name "twkvdemo2020"

#To view your keys
az keyvault secret list --vault-name "twkvdemo2020"

#Create access policy
az keyvault set-policy --name "twkvdemo2020" --upn "jwest@tomwechsler.ch" --secret-permissions get, list

#Enable Key Vault for deployment
az keyvault update --name "twkvdemo2020" --resource-group "myResourceGroup" --enabled-for-deployment "true"

#Enable Key Vault for disk encryption
az keyvault update --name "twkvdemo2020" --resource-group "myResourceGroup" --enabled-for-disk-encryption "true"

#Enable Key Vault for template deployment
az keyvault update --name "twkvdemo2020" --resource-group "myResourceGroup" --enabled-for-template-deployment "true"

#Clean up resources
az group delete --name myResourceGroup --yes