azure_keyvault_certificate_create_retrieve_delete_quickstart.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.keyvault.certificates import CertificateClient, CertificatePolicy
4
5# Get the Key Vault URL from environment variables
6VAULT_URL = os.environ["AZURE_KEYVAULT_URL"]
7
8# Authenticate using DefaultAzureCredential
9credential = DefaultAzureCredential()
10
11# Create a CertificateClient
12client = CertificateClient(vault_url=VAULT_URL, credential=credential)
13
14certificate_name = "myCertificate"
15
16print(f"Creating a certificate in {VAULT_URL} called '{certificate_name}'...")
17
18# Create a certificate with default policy
19# The begin_create_certificate method returns a poller that allows you to wait for the operation to complete.
20poller = client.begin_create_certificate(
21    certificate_name=certificate_name, policy=CertificatePolicy.get_default()
22)
23certificate = poller.result()
24
25print("done.")
26
27print(f"Retrieving your certificate from {VAULT_URL}.")
28
29# Get the latest version of the certificate
30retrieved_certificate = client.get_certificate(certificate_name)
31
32print(f"Certificate with name '{retrieved_certificate.name}' was found.")
33
34print(f"Deleting your certificate from {VAULT_URL}...")
35
36# Delete the certificate
37# The begin_delete_certificate method returns a poller.
38delete_poller = client.begin_delete_certificate(certificate_name)
39deleted_certificate = delete_poller.result()
40
41print("done.")