azure-keyvault-certificate-backing-secret

An exportable Key Vault certificate's private key is available from its same-name backing secret.

azurecritical service: azure:keyvault emits CanReadCredential

Where it sits

locationKey Vault certificate backing Secret.value
location kindcertificate_material
data kindscredential private_key certificate password
emits edgeCanReadCredential
serviceKey Vault (azure:keyvault)

Collection recipe

access modedata_plane
operationSecrets - Get
response pathvalue
encodingbase64
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.KeyVault/vaults/secrets/getSecret/action

References

move · open · esc close