Key Vault creation in Azure - Mini Project: Build & Apply

Key Vault creation

📖 Scenario: You are setting up a secure place in Azure to store secrets like passwords and keys. This secure place is called a Key Vault. It helps keep your important information safe and easy to manage.

🎯 Goal: Create an Azure Key Vault resource with basic settings using an ARM template. You will define the resource, set its name, location, and access policies step-by-step.

📋 What You'll Learn

Create a resource group variable

Define the Key Vault resource with name and location

Add an access policy with a specific object ID

Complete the ARM template with all required properties

💡 Why This Matters

🌍 Real World

Azure Key Vault is used to securely store and manage sensitive information like keys, secrets, and certificates in cloud applications.

💼 Career

Knowing how to create and configure Key Vaults is essential for cloud engineers and security specialists working with Azure infrastructure.

1

Create a variable for the resource group name

Create a variable called resourceGroupName and set it to "MyResourceGroup".

Azure

# Your code here

Need a hint?

Use var to declare the variable and assign the exact string.

2

Define the Key Vault resource with name and location

Create a variable called keyVault and assign an object with type set to "Microsoft.KeyVault/vaults", name set to "MyKeyVault", and location set to "eastus".

Azure

var resourceGroupName = "MyResourceGroup";
# Your code here

Need a hint?

Define an object with the exact keys and values as shown.

3

Add an access policy with a specific object ID

Add a property properties to keyVault with an accessPolicies array containing one object with objectId set to "12345678-1234-1234-1234-123456789abc".

Azure

var resourceGroupName = "MyResourceGroup";
var keyVault = {
  type: "Microsoft.KeyVault/vaults",
  name: "MyKeyVault",
  location: "eastus"
};
# Your code here

Need a hint?

Remember to nest the accessPolicies array inside properties.

4

Complete the ARM template with all required properties

Add apiVersion set to "2019-09-01" and sku with family set to "A" and name set to "standard" inside keyVault.

Azure

var resourceGroupName = "MyResourceGroup";
var keyVault = {
  type: "Microsoft.KeyVault/vaults",
  name: "MyKeyVault",
  location: "eastus",
  properties: {
    accessPolicies: [
      {
        objectId: "12345678-1234-1234-1234-123456789abc"
      }
    ]
  }
};
# Your code here

Need a hint?

Include apiVersion and sku properties at the top level of the keyVault object.