skills.rest
davidrrowley
davidrrowleyCOMMUNITY
Explore all skills by this author →
Website𝕏@davidrrowleyGitHub

azure-keyvault-keys-ts

Manage cryptographic keys and operations in Azure Key Vault using the @azure/keyvault-keys SDK.

Updated Apr 12, 2026
Search Tags:#typescript#authentication#azure#cryptography#keyvault#keys#key-rotation
One-click install
npx skills add https://github.com/davidrrowley/CortexYouV3 --skill azure-keyvault-keys-ts
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-keyvault-keys-ts
Source: https://github.com/davidrrowley/CortexYouV3/tree/main/.agents/skills/azure-keyvault-keys-ts
Command: npx skills add https://github.com/davidrrowley/CortexYouV3 --skill azure-keyvault-keys-ts

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Managing cryptographic keys and performing cryptographic operations in Azure Key Vault can be complex and error-prone; this Skill consolidates SDK usage patterns, lifecycle operations, and cryptography workflows into actionable guidance so developers can securely create, rotate, encrypt/decrypt, sign/verify, and back up keys without guessing about APIs or poller patterns.

Core Features & Use Cases

  • Key Lifecycle Management: Create, import, rotate, list, soft-delete, recover, and purge keys using KeyClient with recommended options and rotation policies.
  • Cryptographic Operations: Perform encrypt/decrypt, sign/verify, and wrap/unwrap operations via CryptographyClient, including handling of algorithm selection and digest management.
  • Operational Patterns & Safety: Examples for poller-based long-running operations, error handling using RestError, environment-driven configuration, and backup/restore strategies for secure workflows.
  • Use Case: Integrate into a TypeScript backend to generate RSA keys for encrypting secrets, rotate keys on a schedule, and sign payloads for downstream verification while preserving auditability.

Quick Start

Instantiate DefaultAzureCredential, create a KeyClient pointed at your vault URL, and call createKey or getKey to manage a key.

Frequently Asked Questions about azure-keyvault-keys-ts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create and rotate cryptographic keys in Azure Key Vault using TypeScript?▼

To manage Azure Key Vault keys in TypeScript, use the @azure/keyvault-keys SDK to create a KeyClient, then call createKey with recommended options or rotate keys on a schedule using rotation policies.

What's the best way to encrypt and decrypt data with Azure Key Vault in a Node.js application?▼

The best way to perform cryptography in Azure Key Vault is using the CryptographyClient from the @azure/keyvault-keys SDK, which handles encrypt/decrypt, sign/verify, and wrap/unwrap operations with proper algorithm selection.

How do I authenticate to Azure Key Vault when managing keys in TypeScript?▼

Authenticating to Azure Key Vault requires instantiating DefaultAzureCredential or an equivalent credential, which you then pass to the KeyClient along with a valid Key Vault URL or AZURE_KEYVAULT_NAME environment variable.

How do you handle long-running operations and RestError when performing key backup and restore workflows?▼

Long-running operations in Azure Key Vault rely on poller-based patterns, while operational safety requires RestError-aware error handling to manage backup and restore workflows securely without API guesswork.

Can I use this approach to soft-delete, recover, and purge keys in Azure Key Vault?▼

Yes, the KeyClient in the @azure/keyvault-keys SDK supports the full key lifecycle, allowing you to soft-delete, recover, and purge cryptographic keys within your TypeScript backend.

Related Skills

Explore More Software Engineering Skills→
davidrrowleydavidrrowley

azure-security-keyvault-keys-java

Manage cryptographic keys and perform operations in Azure Key Vault with Java.

Community
Intermediate
dmzoneilldmzoneill
2

manage-secrets

Encrypt and decrypt files and strings with Ansible Vault and OpenSSL.

Community
Intermediate
julianobarbosajulianobarbosa
7

keyvault-csi-driver

Mount Azure Key Vault secrets into Kubernetes pods via SecretProviderClass.

Community
Advanced
AbsolutelySkilledAbsolutelySkilled
207

cryptography

Automates cryptography code templates for Node.js/TypeScript projects.

Official
Advanced