azure::key-vault-key

Creates a key vault key.

Example

azure::key-vault-key vault-key-example
    name: "key-example-gyro"
    vault: $(azure::key-vault vault-example-keys)
    type: "RSA"

    operations: ["encrypt", "decrypt"]

    attribute
        enabled : false
        expires : "2020-04-04T15:54:12.000Z"
        not-before : "2020-04-02T15:54:12.000Z"
    end

    tags: {
        Name: "vault-key-examples"
    }
end

Attributes

Attribute Description
name The name of the key. (Required)
vault The key vault under which the key is going to be created. (Required)
type The type of the key. Valid values are EC, RSA, RSA-HSM or oct Valid values are EC, EC-HSM, RSA, RSA-HSM, OCT or OCT-HSM. (Required)
attribute subresource

The attribute config for the key. (Required)

enabled
Enable or Disable the key for use. (Required)
expires
A date time value in UTC specifying when the key expires. Format YYYY-MM-DDTHH:MM:SS.sssZ. Example 2020-04-03T15:54:12.000Z.
not-before
A date time value in UTC specifying the not-before time. Format YYYY-MM-DDTHH:MM:SS.sssZ. Example 2020-04-03T15:54:12.000Z.
size The size of the key.
operations list A set of key operations that you want to enable. Valid values are encrypt, decrypt, sign, verify, wrapKey, unwrapKey and import.
curve-name The elliptic curve name Valid values are P-256, P-384, P-521 or P-256K.
tags map Tags for the key.

Outputs

Attribute Description
version The current version of the key.
id The id of the key.