> For the complete documentation index, see [llms.txt](https://docs.duplocloud.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.duplocloud.com/docs/automation-platform/overview-2/azure-services/key-vault.md).

# Key Vault

DuploCloud integrates with Azure Key Vault to secure the storage of secrets, such as passwords and database connection strings.

## Configuring Azure Key Vault

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Key Vault**.
2. Click **Add**. The **Create a** **Key Vault** pane displays.<br>

   <div align="left"><figure><img src="/files/zcEEeIQyfDCyS6L98DPS" alt=""><figcaption><p><strong>Create a</strong> <strong>Key Vault</strong> pane</p></figcaption></figure></div>
3. Enter a **Name** for the Key Vault.
4. Select a **SKU Pricing Tier**: **Standard** or **Premium**.
5. Optionally, enable **Purge Protection**. Once enabled, this cannot be reversed.
6. Specify the number of **Retention Days** for key vault items.
7. Click **Create** to provision the Key Vault.

## Adding Secrets to Key Vault

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Key Vault**.
2. Select the **Azure Key Vaults** tab.
3. Select the Key Vault from the **NAME** column.
4. Select the **Secrets** tab.
5. Click, **Add**. The **Create a Secret** pane displays.<br>

   <div align="left"><figure><img src="/files/OXNgp3tiY60Gfbqjvhw5" alt="" width="453"><figcaption><p>The <strong>Create a Secret</strong> pane</p></figcaption></figure></div>
6. Complete the following fields on the **Create a Secret** pane:
   * **Name**: Specify the name of the secret.
   * **Secret Value**: Enter the actual value of the secret.
   * **Content Type**: Define the type of content stored in the secret (e.g., **text/plain**, **application/json**, etc.).
7. Click **Submit**.

## Updating a Secret in Azure Key Vault

After creating a Key Vault and adding secrets, you can update an existing secret when needed. Follow these steps to update a secret in your Azure Key Vault:

1. In the DuploCloud Portal, go to **Cloud Services** -> **Key Vault**.
2. Select the Key Vault you wish to manage from the **NAME** column.
3. Select the **Secrets** tab.
4. Click the menu icon (<img src="/files/UUsk9qqQdoLBf2eKdpqW" alt="" data-size="line">) next to the secret you want to update.
5. From the menu options, select **Edit**. The **Update a Secret** pane displays.
6. Update the **Value** field with the new data you want to store.
7. Click **Update** to apply the changes. The updated secret will now be stored as a new version, and the old version will be moved to the secret's version history.

## Managing Deleted Azure Key Vaults

DuploCloud allows you to view, recover, and purge deleted Azure Key Vaults directly from the portal.

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Key Vault**.
2. Select the **Azure Key Vaults** tab.
3. Click the **Actions** button.
4. Select **Manage Deleted Vaults**. A list of deleted key vaults displays.<br>

   <figure><img src="/files/LNHL7NmpCujfLLd4nbtM" alt=""><figcaption><p><strong>Manage Deleted Vaults</strong> page with <strong>Recover</strong> and <strong>Purge</strong> options highlighted</p></figcaption></figure>
5. Click the menu icon (<img src="/files/UUsk9qqQdoLBf2eKdpqW" alt="" data-size="line">) in the row of the vault you want to manage.
6. Select one of the following options:
   * **Recover**: Restore the deleted vault to active status so it can be used again.
   * **Purge**: Permanently delete the vault and all its contents. This action cannot be undone.
7. Confirm your choice in the popup confirmation modal to proceed.

## **Viewing Secret Versions**

1. Select the **Secrets** tab.
2. Select the Key Vault you wish to manage from the **NAME** column.
3. In the DuploCloud Portal, go to **Cloud Services** -> **Key Vault**.
4. Click the caret (<img src="/files/4GN4ExOO6xXiP4YoymbB" alt="" data-size="line">) next to the secret's name. A list of available versions will appear.
5. To view a specific version, click the menu icon (<img src="/files/UUsk9qqQdoLBf2eKdpqW" alt="" data-size="line">) next to the version and select **View**. The **JSON representation** of that version displays.

<figure><img src="/files/cuup5FwnR26KVY7cnzls" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.duplocloud.com/docs/automation-platform/overview-2/azure-services/key-vault.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.