/azure-compliance

Key Vault Secrets — Rust SDK Quick Reference

Condensed from azure-keyvault-secrets-rust. Full patterns (versioning, update properties, tags, soft delete recovery) in the azure-keyvault-secrets-rust plugin skill if installed.

Install

cargo add azure_security_keyvault_secrets azure_identity

Quick Start

use azure_identity::DeveloperToolsCredential;
use azure_security_keyvault_secrets::SecretClient;
let credential = DeveloperToolsCredential::new(None)?;
let client = SecretClient::new("https://<vault>.vault.azure.net/", credential.clone(), None)?;

Best Practices

• Use Entra ID auth — DeveloperToolsCredential for dev, ManagedIdentityCredential for production
• Use into_model()? to deserialize responses
• Use ResourceExt trait for extracting names from IDs
• Handle soft delete — deleted secrets can be recovered within retention period
• Set content type — helps identify secret format
• Use tags for organizing and filtering secrets
• Version secrets — new values create new versions automatically

Non-Obvious Patterns

use azure_security_keyvault_secrets::models::SetSecretParameters;
let params = SetSecretParameters { value: Some("secret-value".into()), ..Default::default() };
client.set_secret("name", params.try_into()?, None).await?.into_model()?;