Azure Key Vault

Overview of the Azure Key Vault integration.

The following documentation is for Azure Key Vault v1.3.4.

Overview

Azure Key Vault securely stores and manages cryptographic keys, secrets, and certificates in the cloud. This integration enables automated secret management, key rotation, and secure credential workflows. Strengthen security posture and automate sensitive data protection in Azure environments.

Setup

The following integrations need to be connected to your Kognitos workspace:

• Azure Key Vault

Steps

Follow these steps to connect the integration in Kognitos:

1

Navigate

Using the left navigation menu, go to Integrations → Explore Integrations.

2

Find

Search for the integration and click on it.

3

Connect

Click on Connect to add a connection to the integration.

4

Configure

Add a name for the connection. You'll be prompted for authentication details if needed. Then, click on Connect.

Authentication

Use one of the following authentication methods to connect this integration in Kognitos. Each method has its own configuration requirements.

Connect using Azure tenant ID, Azure client ID, Azure client secret and Azure subscription ID

Connect to Microsoft Graph API using client credentials.

Label	Description	Type
Azure tenant ID	The Azure tenant ID	text
Azure client ID	The client (application) ID	text
Azure client secret	The client secret	sensitive
Azure subscription ID	The Azure subscription ID	text

Actions

The following actions are available in the Azure Key Vault integration:

1. Get key vaults

Get all Key Vaults accessible to the authenticated principal.

2. Get a secret from a key vault

Get a secret from a Key Vault.

3. List secrets in a key vault

Get all secrets in a Key Vault.

Concepts

Azure key vault reference

Represents a reference to an Azure Key Vault.

Field Name	Description	Type
id	The ID of the key vault.	text
name	The name of the key vault.	text
url	The URL of the key vault.	text
location	The Azure region where the key vault is located.	optional[text]
resource_group	The resource group containing the key vault.	optional[text]
subscription_id	The subscription ID containing the key vault.	optional[text]