Cloud.Service.Azure.Key.Vault.Access.Policy

Cloud.Service.Azure.Key.Vault.Access.Policy
Cloud.Service.Azure.Key.Vault.Access.Policy
JSON Example
{
    "application_id": "string",
    "certificate_permissions": [
        "string"
    ],
    "key_permissions": [
        "string"
    ],
    "object_id": "string",
    "provider": "string",
    "resource_group_name": "string",
    "secret_permissions": [
        "string"
    ],
    "tenant_id": "string",
    "vault_name": "string"
}
string
application_id
Optional

Unique identifier of an application in Azure Active Directory.

array of string
certificate_permissions
Optional

One or more of the following certificate permissions: backup, create, delete, deleteissuers, get, getissuers, import, list, listissuers, managecontacts, manageissuers, purge, recover, restore, setissuers, and update.

array of string
key_permissions
Required

(Required) One or more of the following key permissions: backup, create, decrypt, delete, encrypt, get, import, list, purge, recover, restore, sign, unwrapKey, update, verify, and wrapKey.

string
object_id
Required

(Required) Object identifier of a user, service principal, or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies. Changing the object ID deletes the existing resource and creates a new one.

string
provider
Required

(Required) The name of the Microsoft Azure cloud account to use for this resource

string
resource_group_name
Required

(Required) Azure resource group in which to create the namespace. Changing the resource group deletes the existing resource and creates a new one.

array of string
secret_permissions
Required

(Required) One or more of the following secret permissions: backup, delete, get, list, purge, recover, restore, and set.

string
tenant_id
Required

(Required) The Azure Active Directory tenant identifier to use for authenticating requests to the key vault. Changing the tenant ID deletes the existing resource and creates a new one.

string
vault_name
Required

(Required) Name of the Key Vault resource. Changing the name deletes the existing resource and creates a new one.