# Key Vault
DuploCloud integrates with Azure Key Vault to secure the storage of secrets, such as passwords and database connection strings.
## Configuring Azure Key Vault
1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Key Vault**.
2. Click **Add**. The **Create a** **Key Vault** pane displays.
Create aKey Vault pane
3. Enter a **Name** for the Key Vault.
4. Select a **SKU Pricing Tier**: **Standard** or **Premium**.
5. Optionally, enable **Purge Protection**. Once enabled, this cannot be reversed.
6. Specify the number of **Retention Days** for key vault items.
7. Click **Create** to provision the Key Vault.
## Adding Secrets to Key Vault
1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Key Vault**.
2. Select the **Azure Key Vaults** tab.
3. Select the Key Vault from the **NAME** column.
4. Select the **Secrets** tab.
5. Click, **Add**. The **Create a Secret** pane displays.
The Create a Secret pane
6. Complete the following fields on the **Create a Secret** pane:
* **Name**: Specify the name of the secret.
* **Secret Value**: Enter the actual value of the secret.
* **Content Type**: Define the type of content stored in the secret (e.g., **text/plain**, **application/json**, etc.).
7. Click **Submit**.
## Updating a Secret in Azure Key Vault
After creating a Key Vault and adding secrets, you can update an existing secret when needed. Follow these steps to update a secret in your Azure Key Vault:
1. In the DuploCloud Portal, go to **Cloud Services** -> **Key Vault**.
2. Select the Key Vault you wish to manage from the **NAME** column.
3. Select the **Secrets** tab.
4. Click the menu icon () next to the secret you want to update.
5. From the menu options, select **Edit**. The **Update a Secret** pane displays.
6. Update the **Value** field with the new data you want to store.
7. Click **Update** to apply the changes. The updated secret will now be stored as a new version, and the old version will be moved to the secret's version history.
## Managing Deleted Azure Key Vaults
DuploCloud allows you to view, recover, and purge deleted Azure Key Vaults directly from the portal.
1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Key Vault**.
2. Select the **Azure Key Vaults** tab.
3. Click the **Actions** button.
4. Select **Manage Deleted Vaults**. A list of deleted key vaults displays.
Manage Deleted Vaults page with Recover and Purge options highlighted
5. Click the menu icon () in the row of the vault you want to manage.
6. Select one of the following options:
* **Recover**: Restore the deleted vault to active status so it can be used again.
* **Purge**: Permanently delete the vault and all its contents. This action cannot be undone.
7. Confirm your choice in the popup confirmation modal to proceed.
## **Viewing Secret Versions**
1. Select the **Secrets** tab.
2. Select the Key Vault you wish to manage from the **NAME** column.
3. In the DuploCloud Portal, go to **Cloud Services** -> **Key Vault**.
4. Click the caret () next to the secret's name. A list of available versions will appear.
5. To view a specific version, click the menu icon () next to the version and select **View**. The **JSON representation** of that version displays.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.duplocloud.com/docs/automation-platform/overview-2/azure-services/key-vault.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.