Azure Key Vault

Azure Key vault with Powershell

What you'll learn

Understand key vault and its features

Managing Key vault with PowerShell

understand difference between management plane and data plane

Understand Purge protection

Requirements

No experience is needed.

Description

This course is intended for learners who are new to Azure key vault and how to leverage PowerShell as well with key vault.  This course provides you knowledge on Management plane and data plane as well. Safeguard cryptographic keys and other secrets used by cloud apps and services. In this course you will also see some privileges operations like purge. In this course we will see how to provision key vault using Azure portal and PowerShellUnderstand with examples different types of data that can be stored in Key VaultThis course is a great learning resource for getting into key vault.Azure Key Vault is a cloud service for securely storing and accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, or cryptographic keys. Key Vault service supports two types of containers: vaults and managed hardware security module (HSM) pools. Vaults support storing software and HSM-backed keys, secrets, and certificates. Managed HSM pools only support HSM-backed keys. Key Vault's soft-delete feature allows recovery of the deleted vaults and deleted key vault objects (for example, keys, secrets, certificates), known as soft-delete.Once a secret, key, certificate, or key vault is deleted, it will remain recoverable for a configurable period of 7 to 90 calendar days. If no configuration is specified the default recovery period will be set to 90 days. This provides users with sufficient time to notice an accidental secret deletion and respond.Two operations must be made to permanently delete a secret. First a user must delete the object, which puts it into the soft-deleted state. Second, a user must purge the object in the soft-deleted state. The purge operation requires additional access policy permissions. These additional protections reduce the risk of a user accidentally or maliciously deleting a secret or a key vault.To purge a secret in the soft-deleted state, a service principal must be granted an additional "purge" access policy permission. The purge access policy permission is not granted by default to any service principal including key vault and subscription owners and must be deliberately set. By requiring an elevated access policy permission to purge a soft-deleted secret, it reduces the probability of accidentally deleting a secret.

Overview

Section 1: Introduction

Lecture 1 Introduction to Key Vault

Lecture 2 Key vault - RBAC

Lecture 3 Key vault - Access Policy

Lecture 4 Creation of Key vault using Powershell

Lecture 5 Key vault Powershell - Contd.

Lecture 6 Key vault Powrshell - Contd.

Lecture 7 Key vault Powershell - Contd.

Anyone who wants to learn Azure key Vault