Skills · SkillDevOps & CloudTesting & SecurityReviewed

azure-keyvault-py

Azure Key Vault for Python: secrets, keys and certificates with secure storage.

Kind: Skill
Works with: Claude Code
Languages: Python
Source: microsoft/skills @ 2130750147de
Path: .github/plugins/azure-sdk-python/skills/azure-keyvault-py/SKILL.md
License: MIT
Jobs: Implementation

InstallCopy it from the source repository, or sign in and let the assistant adapt it for your project.

# Azure Key Vault SDK for Python

Secure storage and management for secrets, cryptographic keys, and certificates.

## Installation

```bash
# Secrets
pip install azure-keyvault-secrets azure-identity

# Keys (cryptographic operations)
pip install azure-keyvault-keys azure-identity

# Certificates
pip install azure-keyvault-certificates azure-identity

# All
pip install azure-keyvault-secrets azure-keyvault-keys azure-keyvault-certificates azure-identity
```

## Environment Variables

```bash
AZURE_KEYVAULT_URL=https://<vault-name>.vault.azure.net/  # Required for all auth methods
AZURE_TOKEN_CREDENTIALS=prod # Required only if DefaultAzureCredential is used in production
```

## Authentication & Lifecycle

> **🔑 Two rules apply to every code sample below:**
>
> 1. **Prefer `DefaultAzureCredential`.** It works locally (Azure CLI / VS Code / Developer CLI) and in Azure (managed identity, workload identity) with no code change. Avoid connection strings, account/API keys — they bypass Entra audit and rotation.
>    - Local dev: `DefaultAzureCredential` works as-is.
…