azure_keyvault_certificate_create_retrieve_delete_quickstart.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.keyvault.certificates import CertificateClient, CertificatePolicy
4
5# Retrieve the Key Vault name from an environment variable
6KEY_VAULT_NAME = os.environ["KEY_VAULT_NAME"]
7KV_URI = f"https://{KEY_VAULT_NAME}.vault.azure.net"
8
9# Authenticate using DefaultAzureCredential
10credential = DefaultAzureCredential()
11client = CertificateClient(vault_url=KV_URI, credential=credential)
12
13certificate_name = "myCertificate"
14
15print(f"Creating a certificate in {KEY_VAULT_NAME} called '{certificate_name}'...")
16
17# Create a certificate with a default policy
18# The begin_create_certificate method returns a poller that allows you to wait for the operation
19poller = client.begin_create_certificate(
20    certificate_name=certificate_name, policy=CertificatePolicy.get_default()
21)
22certificate = poller.result()
23
24print(" done.")
25
26print(f"Retrieving your certificate from {KEY_VAULT_NAME}.")
27
28# Get the latest version of the certificate
29retrieved_certificate = client.get_certificate(certificate_name)
30
31print(f"Certificate with name '{retrieved_certificate.name}' was found.")
32
33print(f"Deleting your certificate from {KEY_VAULT_NAME}...")
34
35# Delete the certificate
36# The begin_delete_certificate method returns a poller
37delete_poller = client.begin_delete_certificate(certificate_name)
38delete_poller.result()
39
40print(" done.")