skills.rest
mfcollins3
mfcollins3COMMUNITY
Explore all skills by this author →
Website𝕏@mfcollins3GitHub

azure-key-vault

Guide Azure Key Vault troubleshooting, security hardening, and deployment patterns.

Updated Mar 18, 2026
Search Tags:#deployment#azure#rbac#key-vault#private-link#managed-hsm
One-click install
npx skills add https://github.com/mfcollins3/standup --skill azure-key-vault-mfcollins3
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-key-vault
Source: https://github.com/mfcollins3/standup/tree/main/.github/skills/azure-key-vault
Command: npx skills add https://github.com/mfcollins3/standup --skill azure-key-vault-mfcollins3

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure Key Vault deployments and day-to-day operations often face challenges around securing access, choosing between RBAC and access policies, and deploying vaults, keys, and secrets consistently across environments. This Skill consolidates expert guidance on troubleshooting, best practices, and deployment patterns to streamline secure key management.

Core Features & Use Cases

  • Troubleshooting common Key Vault issues, including certificate problems, access policy troubleshooting, and Private Link diagnostics.
  • Security and governance guidance covering soft-delete, backups, RBAC vs access policies, and attestation considerations for Managed HSM.
  • Deployment and integration patterns for provisioning vaults and keys with ARM templates, Bicep, Terraform, Azure CLI, and PowerShell; rotation and secure release workflows.
  • Decision making for migrations from access policies to RBAC and capacity planning for Managed HSM deployments.

Quick Start

Configure a secure Key Vault deployment with RBAC, enable soft-delete, and review access policies in your Azure environment.

Frequently Asked Questions about azure-key-vault

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Should I use Azure RBAC or access policies for Key Vault authentication?▼

Azure Key Vault supports both RBAC and access policies for authentication. RBAC is recommended for new deployments using role-based control, while access policies are legacy but still supported for existing vaults.

How do I troubleshoot Azure Key Vault Private Link connection issues?▼

Troubleshooting Azure Key Vault Private Link involves diagnosing network security group configurations and DNS resolution. This Skill provides guidance for resolving common Private Link connectivity and access diagnostic problems.

How do I deploy Azure Key Vault using Terraform or Bicep?▼

You can deploy Azure Key Vault using Infrastructure as Code tools like Terraform, Bicep, ARM templates, Azure CLI, or PowerShell. This Skill provides deployment patterns for provisioning vaults, keys, and secrets consistently.

When should I migrate my Key Vault from access policies to RBAC?▼

Migrating from access policies to RBAC is recommended when you need centralized governance and finer-grained permissions. This Skill provides decision-making guidance for planning and executing this migration securely.

Do I need Managed HSM for my Azure Key Vault deployment?▼

Managed HSM is required for Azure Key Vault deployments needing dedicated, FIPS 140-2 Level 3 validated hardware security modules. This Skill offers capacity planning and attestation considerations for Managed HSM.

How do I enable soft-delete and backup Azure Key Vault secrets?▼

Soft-delete and backup are essential security features for Azure Key Vault that protect against accidental data deletion. This Skill provides security hardening guidance covering soft-delete configuration and backup procedures.

Related Skills

Explore More Software Engineering Skills→
jonathan-vellajonathan-vella
6

azure-validate

Validate Azure environments and configurations before deployment using Bicep or Terraform.

Community
Advanced
jamesogunsanjamesogunsan

secrets-management

Integrate Vault and AWS Secrets Manager to retrieve secrets in CI/CD pipelines.

Community
Advanced
BagelHoleBagelHole
46

azure-networking

Configure Azure VNets, NSGs, and Private Endpoints via Azure CLI.

Community
Intermediate
veilkeyveilkey
7

security-audit

Audit VeilKey code for cryptographic integrity and secret safety.

Official
Advanced