azure_keyvault_secret_create_retrieve_delete_quickstart.py

1import os
2from azure.keyvault.secrets import SecretClient
3from azure.identity import DefaultAzureCredential
4
5# Set the name of the Key Vault and the secret
6# Environment variable: KEY_VAULT_NAME
7key_vault_name = os.environ["KEY_VAULT_NAME"]
8kv_uri = f"https://{key_vault_name}.vault.azure.net"
9
10# Authenticate using DefaultAzureCredential, which looks for 
11# environment variables or managed identity
12credential = DefaultAzureCredential()
13client = SecretClient(vault_url=kv_uri, credential=credential)
14
15secret_name = "mySecret"
16secret_value = "password123"
17
18print(f"Creating a secret in {key_vault_name} called '{secret_name}' with the value '{secret_value}'...")
19
20# Create a secret
21client.set_secret(secret_name, secret_value)
22
23print("Done.")
24print(f"Retrieving your secret from {key_vault_name}.")
25
26# Retrieve a secret
27retrieved_secret = client.get_secret(secret_name)
28
29print(f"Your secret is '{retrieved_secret.value}'.")
30print(f"Deleting your secret from {key_vault_name}...")
31
32# Delete a secret (this starts the deletion process)
33poller = client.begin_delete_secret(secret_name)
34deleted_secret = poller.result()
35
36print("Done.")