Skip to main content Skills Marktplatz Entdecken und erkunden Sie KI-Skills, die von der Community erstellt wurden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Prompt-Details anzeigen Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
npx skills add https://github.com/foolhardy45/portfolio --skill azure-keyvault-secrets-tsDer Befehl bleibt in einer Zeile. Scrollen Sie horizontal, um ihn vor dem Kopieren vollständig zu prüfen.
Sie bevorzugen eine lokale Kopie? Laden Sie die Dateien herunter, die SkillsMP derzeit vorliegen.
ZIP herunterladen Herunterladen... Mehr aus diesem Repository
Verwandte Berufe SOC
Basierend auf der SOC-Berufsklassifikation
name azure-keyvault-secrets-ts description Manage secrets using Azure Key Vault Secrets SDK for JavaScript (@azure/keyvault-secrets). Use when storing and retrieving application secrets or configuration values. risk unknown source community date_added 2026-02-27
Azure Key Vault Secrets SDK for TypeScript
Manage secrets with Azure Key Vault.
Installation
npm install @azure/keyvault-secrets @azure/identity
Environment Variables
KEY_VAULT_URL=https://<vault-name>.vault.azure.net
AZURE_KEYVAULT_NAME=<vault-name>
Authentication
import { DefaultAzureCredential } from "@azure/identity" ;
import { SecretClient } from "@azure/keyvault-secrets" ;
const
new
DefaultAzureCredential
const
`https://${process.env.AZURE_KEYVAULT_NAME} .vault.azure.net`
const
new
KeyClient
const
new
SecretClient
Secrets Operations
Create/Set Secret const secret = await secretClient.setSecret ("MySecret" , "secret-value" );
const secretWithAttrs = await secretClient.setSecret ("MySecret" , "value" , {
enabled : true ,
expiresOn : new Date ("2025-12-31" ),
contentType : "application/json" ,
tags : { environment : "production" }
});
Get Secret
const secret = await secretClient.getSecret ("MySecret" );
console .log (secret.value );
const specificSecret = await secretClient.getSecret ("MySecret" , {
version : secret.properties .version
});
List Secrets for await (const secretProperties of secretClient.listPropertiesOfSecrets ()) {
console .log (secretProperties.name );
}
for await (const version of secretClient.listPropertiesOfSecretVersions ("MySecret" )) {
console .log (version.version );
}
Delete Secret
const deletePoller = await secretClient.beginDeleteSecret ("MySecret" );
await deletePoller.pollUntilDone ();
await secretClient.purgeDeletedSecret ("MySecret" );
const recoverPoller = await secretClient.beginRecoverDeletedSecret ("MySecret" );
await recoverPoller.pollUntilDone ();
Keys Operations
Create Keys
const key = await keyClient.createKey ("MyKey" , "RSA" );
const rsaKey = await keyClient.createRsaKey ("MyRsaKey" , { keySize : 2048 });
const ecKey = await keyClient.createEcKey ("MyEcKey" , { curve : "P-256" });
const keyWithAttrs = await keyClient.createKey ("MyKey" , "RSA" , {
enabled : true ,
expiresOn : new Date ("2025-12-31" ),
tags : { purpose : "encryption" },
keyOps : ["encrypt" , "decrypt" , "sign" , "verify" ]
});
Get Key const key = await keyClient.getKey ("MyKey" );
console .log (key.name , key.keyType );
List Keys for await (const keyProperties of keyClient.listPropertiesOfKeys ()) {
console .log (keyProperties.name );
}
Rotate Key
const rotatedKey = await keyClient.rotateKey ("MyKey" );
await keyClient.updateKeyRotationPolicy ("MyKey" , {
lifetimeActions : [{ action : "Rotate" , timeBeforeExpiry : "P30D" }],
expiresIn : "P90D"
});
Delete Key const deletePoller = await keyClient.beginDeleteKey ("MyKey" );
await deletePoller.pollUntilDone ();
await keyClient.purgeDeletedKey ("MyKey" );
Cryptographic Operations
Create CryptographyClient import { CryptographyClient } from "@azure/keyvault-keys" ;
const cryptoClient = new CryptographyClient (key, credential);
const cryptoClient = new CryptographyClient (key.id !, credential);
Encrypt/Decrypt
const encryptResult = await cryptoClient.encrypt ({
algorithm : "RSA-OAEP" ,
plaintext : Buffer .from ("My secret message" )
});
const decryptResult = await cryptoClient.decrypt ({
algorithm : "RSA-OAEP" ,
ciphertext : encryptResult.result
});
console .log (decryptResult.result .toString ());
Sign/Verify import { createHash } from "node:crypto" ;
const hash = createHash ("sha256" ).update ("My message" ).digest ();
const signResult = await cryptoClient.sign ("RS256" , hash);
const verifyResult = await cryptoClient.verify ("RS256" , hash, signResult.result );
console .log ("Valid:" , verifyResult.result );
Wrap/Unwrap Keys
const wrapResult = await cryptoClient.wrapKey ("RSA-OAEP" , Buffer .from ("key-material" ));
const unwrapResult = await cryptoClient.unwrapKey ("RSA-OAEP" , wrapResult.result );
Backup and Restore
const keyBackup = await keyClient.backupKey ("MyKey" );
const secretBackup = await secretClient.backupSecret ("MySecret" );
const restoredKey = await keyClient.restoreKeyBackup (keyBackup!);
const restoredSecret = await secretClient.restoreSecretBackup (secretBackup!);
Key Types import {
KeyClient ,
KeyVaultKey ,
KeyProperties ,
DeletedKey ,
CryptographyClient ,
KnownEncryptionAlgorithms ,
KnownSignatureAlgorithms
} from "@azure/keyvault-keys" ;
import {
SecretClient ,
KeyVaultSecret ,
SecretProperties ,
DeletedSecret
} from "@azure/keyvault-secrets" ;
Error Handling try {
const secret = await secretClient.getSecret ("NonExistent" );
} catch (error : any ) {
if (error.code === "SecretNotFound" ) {
console .log ("Secret does not exist" );
} else {
throw error;
}
}
Best Practices
Use DefaultAzureCredential - Works across dev and productionEnable soft-delete - Required for production vaultsSet expiration dates - On both keys and secretsUse key rotation policies - Automate key rotationLimit key operations - Only grant needed operations (encrypt, sign, etc.)Browser not supported - These SDKs are Node.js only
When to Use This skill is applicable to execute the workflow or actions described in the overview.
