Azure Key Vault Keys for .NET FAQs

Question 1

How does this skill handle key recovery?

Accepted Answer

It provides code snippets for managing soft-delete features, including starting recovery operations for deleted keys and purging keys for permanent deletion when necessary.

Question 2

What is the difference between KeyClient and CryptographyClient?

Accepted Answer

KeyClient is used for management operations like creating, deleting, and listing keys. CryptographyClient is specialized for performing data operations like encryption, decryption, and signing using a specific key version.

Question 3

Does this skill support Hardware Security Modules (HSM)?

Accepted Answer

Yes, it provides implementation patterns for hardware-protected keys. By setting the HardwareProtected property to true during key creation, you can ensure keys are stored in a FIPS 140-2 Level 3 validated HSM.

Question 4

How do I authenticate with Azure Key Vault using this skill?

Accepted Answer

The skill recommends using DefaultAzureCredential from the Azure.Identity package, which automatically handles authentication across local development and Azure environments like App Service or Azure Functions.

Question 5

Can Claude help me automate key rotation?

Accepted Answer

Absolutely. This skill includes patterns for defining and updating KeyRotationPolicy, allowing you to set automatic rotation triggers based on time before expiry or specific intervals.

Azure Key Vault Keys for .NET

Azure Key Vault Keys for .NET

主な機能

ユースケース

主な機能

ユースケース