Permissions the identity has for keys, secrets, certificates and storage. The object ID must be unique for the list of access policies. The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The URI of the vault for performing operations on keys and secrets.Īpplication ID of the client making request on behalf of a principal The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.

It does not accept false value.Ī set of rules governing the network accessibility of a vault. Property to specify whether the 'soft delete' functionality is enabled for this key vault. Enabling this functionality is irreversible - that is, the property does not accept false as its value. The setting is effective only if soft delete is also enabled.

Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. Property specifying whether protection against purge is enabled for this vault. Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault. Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys. Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault. The vault's create mode to indicate whether the vault need to be recovered or not. When createMode is set to recover, access policies are not required. All identities in the array must use the same tenant ID as the key vault's tenant ID. See Tags in templatesĪn array of 0 to 1024 identities that have access to the key vault. The tags that will be assigned to the key vault.ĭictionary of tag names and values. The supported Azure location where the key vault should be created. The resource api version For Bicep, set this value in the resource declaration.

The resource type For Bicep, set this value in the resource declaration.

Dual family secrets