azure_keyvault_certificate_create_retrieve_delete_quickstart.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.keyvault.certificates import CertificateClient, CertificatePolicy
4
5# Get the Key Vault URL from environment variables
6# Example: "https://<your-unique-keyvault-name>.vault.azure.net/"
7VAULT_URL = os.environ["AZURE_KEYVAULT_URL"]
8
9# Authenticate using DefaultAzureCredential
10credential = DefaultAzureCredential()
11
12# Create a CertificateClient
13client = CertificateClient(vault_url=VAULT_URL, credential=credential)
14
15certificate_name = "myCertificate"
16
17print(f"Creating a certificate in {VAULT_URL} called '{certificate_name}'...")
18
19# Create a certificate with a default policy
20# This operation is asynchronous; for this example, we use the default policy
21client.begin_create_certificate(
22    certificate_name=certificate_name,
23    policy=CertificatePolicy.get_default()
24).result()
25
26print("Done.")
27
28print(f"Retrieving your certificate from {VAULT_URL}.")
29
30# Get the latest version of the certificate
31retrieved_certificate = client.get_certificate(certificate_name)
32
33print(f"Certificate with name '{retrieved_certificate.name}' was found.")
34
35print(f"Deleting your certificate from {VAULT_URL}...")
36
37# Delete the certificate
38delete_operation = client.begin_delete_certificate(certificate_name)
39delete_operation.result()
40
41print("Done.")