Cloud.Service.Azure.Key.Vault.Access.Policy

JSON Example

{
    "application_id": "string",
    "certificate_permissions": [
        "string"
    ],
    "key_permissions": [
        "string"
    ],
    "object_id": "string",
    "provider": "string",
    "resource_group_name": "string",
    "secret_permissions": [
        "string"
    ],
    "tenant_id": "string",
    "vault_name": "string"
}

string

application_id

Optional

Unique identifier of an application in Azure Active Directory.

array of string

certificate_permissions

Optional

One or more of the following certificate permissions: backup, create, delete, deleteissuers, get, getissuers, import, list, listissuers, managecontacts, manageissuers, purge, recover, restore, setissuers, and update.

array of string

key_permissions

Required

(Required) One or more of the following key permissions: backup, create, decrypt, delete, encrypt, get, import, list, purge, recover, restore, sign, unwrapKey, update, verify, and wrapKey.

string

object_id

Required

(Required) Object identifier of a user, service principal, or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies. Changing the object ID deletes the existing resource and creates a new one.

string

provider

Required

(Required) The name of the Microsoft Azure cloud account to use for this resource

string

resource_group_name

Required

(Required) Azure resource group in which to create the namespace. Changing the resource group deletes the existing resource and creates a new one.

array of string

secret_permissions

Required

(Required) One or more of the following secret permissions: backup, delete, get, list, purge, recover, restore, and set.

string

tenant_id

Required

(Required) The Azure Active Directory tenant identifier to use for authenticating requests to the key vault. Changing the tenant ID deletes the existing resource and creates a new one.

string

vault_name

Required

(Required) Name of the Key Vault resource. Changing the name deletes the existing resource and creates a new one.