azure_keyvault_creation_with_default_credential_and_mgmt_sdk.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.mgmt.keyvault import KeyVaultManagementClient
4from azure.mgmt.keyvault.models import VaultCreateOrUpdateParameters, VaultProperties, Sku, SkuName
5
6# Acquisition of the subscription ID from environment variables
7SUBSCRIPTION_ID = os.environ.get("AZURE_SUBSCRIPTION_ID", "your-subscription-id")
8GROUP_NAME = "my-resource-group"
9VAULT_NAME = "my-unique-keyvault-name"
10LOCATION = "eastus"
11TENANT_ID = os.environ.get("AZURE_TENANT_ID", "your-tenant-id")
12
13# Authenticate using DefaultAzureCredential
14credential = DefaultAzureCredential()
15
16# Initialize the KeyVault Management Client
17kv_client = KeyVaultManagementClient(credential, SUBSCRIPTION_ID)
18
19# Define the vault properties
20# Note: tenant_id and access_policies are required for creation
21parameters = VaultCreateOrUpdateParameters(
22    location=LOCATION,
23    properties=VaultProperties(
24        tenant_id=TENANT_ID,
25        sku=Sku(name=SkuName.standard),
26        access_policies=[]  # You can define access policies here
27    )
28)
29
30# Create the Key Vault
31poller = kv_client.vaults.begin_create_or_update(
32    GROUP_NAME,
33    VAULT_NAME,
34    parameters
35)
36
37vault = poller.result()
38
39print(f"Key Vault {vault.name} created at {vault.properties.vault_uri}")