azure_keyvault_secret_create_retrieve_delete_quickstart.py

1import os
2from azure.keyvault.secrets import SecretClient
3from azure.identity import DefaultAzureCredential
4
5# Set the name of the Key Vault and the secret
6# This should be set as an environment variable or replaced directly
7key_vault_name = os.environ["KEY_VAULT_NAME"]
8kv_uri = f"https://{key_vault_name}.vault.azure.net"
9
10# Authenticate using DefaultAzureCredential
11credential = DefaultAzureCredential()
12client = SecretClient(vault_url=kv_uri, credential=credential)
13
14secret_name = "ExampleSecret"
15secret_value = "h3llo_w0rld"
16
17print(f"Creating a secret in {key_vault_name} called '{secret_name}' with the value '{secret_value}' ...")
18
19# Create a secret
20client.set_secret(secret_name, secret_value)
21
22print(" done.")
23
24print(f"Retrieving your secret from {key_vault_name}.")
25
26# Retrieve the secret
27retrieved_secret = client.get_secret(secret_name)
28
29print(f"Your secret is '{retrieved_secret.value}'.")
30print(f"Deleting your secret from {key_vault_name} ...")
31
32# Delete the secret
33poller = client.begin_delete_secret(secret_name)
34deleted_secret = poller.result()
35
36print(" done.")