Azure Key Vault

Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It helps safeguard cryptographic keys and secrets used by cloud applications and services.

With Azure Key Vault, you can:

• Securely store secrets: Protect secrets like API keys, passwords, and connection strings with hardware security modules (HSMs)
• Control access with Azure AD: Use Azure Active Directory authentication and fine-grained access policies to manage who can access which secrets
• Version secrets automatically: Every secret update creates a new version, maintaining a complete audit trail
• Set expiration and activation dates: Configure secrets to automatically become valid or expire at specific times
• Monitor access and usage: Track all secret operations through Azure Monitor and diagnostic logs
• Soft-delete and purge protection: Recover accidentally deleted secrets within a retention period before permanent deletion
• Tag and organize secrets: Add metadata tags to categorize and manage secrets across your vault

In SteelEngine, the Azure Key Vault integration allows your workflows to securely retrieve credentials and configuration values at runtime, create and manage secrets as part of automation pipelines, and maintain a centralized secrets store that your agents can access. This is particularly useful for workflows that need to authenticate with Azure services or other systems, manage secrets programmatically, or maintain separation between development, staging, and production credentials — all without exposing secrets in your workflow definitions.

Use a public Azure vault URL in the form https://<vault-name>.vault.azure.net. Private endpoints, custom domains, nonstandard ports, and redirects are not supported by this integration.

Create or Update Secret writes a new secret version. If the name already exists, it changes the value returned by reads of the latest version; it does not fail with an "already exists" error. Select a unique name when creating a separate secret. The azure_key_vault_create_secret tool ID remains unchanged.

Usage Instructions

Integrate Azure Key Vault into the workflow. Retrieve, write, list, and delete secrets in your Azure Key Vault. Create or Update Secret creates a new version if the name already exists, changing the value returned by Get Secret when no version is specified.

Tools

azure_key_vault_get_secret

Retrieve a secret value from Azure Key Vault

Input

Output

azure_key_vault_list_secrets

List all secrets in an Azure Key Vault

Input

Output

azure_key_vault_create_secret

Create a secret in Azure Key Vault, or create a new version with the supplied value if the name already exists. Changes the value returned when reading the latest version.

Input

Output

azure_key_vault_update_secret

Update an existing secret in Azure Key Vault (creates a new version)

Input

Output

azure_key_vault_delete_secret

Soft-delete a secret from Azure Key Vault (can be recovered if soft-delete is enabled)

Input

Output