🛠️ 開発・MCP コミュニティ

azure-key-vault

Azure Key Vault開発に関する専門知識を提供し、鍵や証明書、シークレットの管理、セキュリティ設定、トラブルシューティング、デプロイメントなどを支援するSkill。

📜 元の英語説明(参考)

Expert knowledge for Azure Key Vault development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using Key Vault/Managed HSM for keys, secrets, certs, BYOK, rotation, or Private Link–secured access, and other Azure Key Vault related development tasks. Not for Azure Dedicated HSM (use azure-dedicated-hsm), Azure Cloud Hsm (use azure-cloud-hsm), Azure Payment Hsm (use azure-payment-hsm), Azure Information Protection (use azure-information-protection).

🇯🇵 日本人クリエイター向け解説

一言でいうと

※ jpskill.com 編集部が日本のビジネス現場向けに補足した解説です。Skill本体の挙動とは独立した参考情報です。

⬇ このSkillをダウンロード(.skill) 元のソースを見る ↗

⚠️ ダウンロード・利用は自己責任でお願いします。当サイトは内容・動作・安全性について責任を負いません。

🎯 このSkillでできること

下記の説明文を読むと、このSkillがあなたに何をしてくれるかが分かります。Claudeにこの分野の依頼をすると、自動で発動します。

📦 インストール方法 (3ステップ)

1. 上の「ダウンロード」ボタンを押して .skill ファイルを取得
2. ファイル名の拡張子を .skill から .zip に変えて展開(macは自動展開可)
3. 展開してできたフォルダを、ホームフォルダの .claude/skills/ に置く
- · macOS / Linux: ~/.claude/skills/
- · Windows: %USERPROFILE%\.claude\skills\

Claude Code を再起動すれば完了。「このSkillを使って…」と話しかけなくても、関連する依頼で自動的に呼び出されます。

詳しい使い方ガイドを見る →

最終更新: 2026-05-17
取得日時: 2026-05-17
同梱ファイル: 1

📖 Skill本文(日本語訳)

※ 原文(英語/中国語)を Gemini で日本語化したものです。Claude 自身は原文を読みます。誤訳がある場合は原文をご確認ください。

Azure Key Vault スキル

このスキルは、Azure Key Vault に関する専門的なガイダンスを提供します。トラブルシューティング、ベストプラクティス、意思決定、制限とクォータ、セキュリティ、構成、統合とコーディングパターン、デプロイについて網羅しています。ローカルのクイックリファレンスコンテンツとリモートドキュメント取得機能を組み合わせています。

このスキルの使い方

Agent への重要事項: 関連するセクションを見つけるには、以下のカテゴリインデックスを使用してください。行範囲が指定されているカテゴリ（例: L35-L120）の場合は、指定された行で read_file を使用してください。ファイルリンクが指定されているカテゴリ（例: [security.md](security.md)）の場合は、リンクされた参照ファイルで read_file を使用してください。

Agent への重要事項: metadata.generated_at が 3 か月以上前の場合は、リポジトリから最新バージョンをプルするようユーザーに提案してください。mcp_microsoftdocs ツールが利用できない場合は、ユーザーにインストールを提案してください: インストールガイド

このスキルは、ドキュメントコンテンツを取得するためにネットワークアクセスを必要とします。

推奨: クエリ文字列 from=learn-agent-skill を指定して mcp_microsoftdocs:microsoft_docs_fetch を使用してください。Markdown を返します。
フォールバック: クエリ文字列 from=learn-agent-skill&accept=text/markdown を指定して fetch_webpage を使用してください。Markdown を返します。

カテゴリインデックス

カテゴリ	行	説明
トラブルシューティング	L36-L44	Key Vault エラーの診断と修正: REST/API エラーコード、アクセスポリシーの失敗、Private Link の設定ミス、Azure Policy の適用に関する問題。
ベストプラクティス	L45-L55	HSM/BYOK キーの生成と転送、安全なキー管理、Managed HSM の災害復旧、Key Vault でのシングル/デュアル資格情報シークレットの自動ローテーションに関するベストプラクティス。
意思決定	L56-L62	キーと HSM の容量計画、スケーリング、暗号化ワークロードまたは Key Vault アクセス制御をアクセスポリシーから RBAC に移行するためのガイダンス。
制限とクォータ	L63-L73	Key Vault と Managed HSM の制限: スロットリング、クォータ、ログの遅延、シークレットサイズ、論理的な削除/回復、ネットワーク/IP ファイアウォール構成。
セキュリティ	L74-L98	Key Vault と Managed HSM のセキュリティ保護: 認証、RBAC とアクセスポリシー、ネットワーク/ファイアウォール/プライベートエンドポイント、ゼロトラスト、バックアップ/論理的な削除、強化/セキュリティのベストプラクティス。
構成	L99-L122	Key Vault と Managed HSM の構成: 監視、アラート、ログ、ポリシー、キーの種類/ローテーション/セキュアリリース、BYOK インポート、ARM テンプレート、特殊なシークレット形式。
統合とコーディングパターン	L123-L151	Key Vault を CA、Event Grid、Private Link、Databricks と統合する方法、およびキー、シークレット、証明書、バックアップ/復元、ローテーション、暗号化に言語 SDK (Go/.NET/Python/JS) を使用する方法。
デプロイ	L152-L155	ARM テンプレート、Bicep、Terraform、Azure CLI、および PowerShell を使用して Azure Key Vault と Managed HSM (コンテナー、キー、シークレット) をデプロイおよびプロビジョニングする方法。

トラブルシューティング

トピック	URL
一般的な Azure Key Vault エラーコードを解決する	https://learn.microsoft.com/en-us/azure/key-vault/general/common-error-codes
Azure Key Vault Private Link 構成の問題を診断して修正する	https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-diagnostics
Azure Key Vault REST API エラーコードを解釈する	https://learn.microsoft.com/en-us/azure/key-vault/general/rest-error-codes
Key Vault での Azure Policy の適用に関するトラブルシューティング	https://learn.microsoft.com/en-us/azure/key-vault/general/troubleshoot-azure-policy-for-key-vault
Azure Key Vault アクセスポリシーの失敗に関するトラブルシューティング	https://learn.microsoft.com/en-us/azure/key-vault/general/troubleshooting-access-issues

ベストプラクティス

トピック	URL
BYOK HSM キーの Key Vault への転送を計画および実行する	https://learn.microsoft.com/en-us/azure/key-vault/keys/hsm-protected-keys
Azure Key Vault 用の BYOK HSM 保護キーを実装する	https://learn.microsoft.com/en-us/azure/key-vault/keys/hsm-protected-keys-byok
Azure Key Vault で安全なキー管理プラクティスを適用する	https://learn.microsoft.com/en-us/azure/key-vault/keys/secure-keys
Azure Managed HSM の中断に対する災害復旧を実行する	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/disaster-recovery-guide
BYOK HSM キーを生成して Azure Managed HSM にインポートする	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/hsm-protected-keys-byok
Key Vault を使用してシングル資格情報シークレットのローテーションを自動化する	https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation
Key Vault を使用してデュアル資格情報シークレットのローテーションを自動化する	https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation-dual

意思決定

トピック	URL
暗号化キーワークロードの移行を計画および実行する	https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads
Azure Key Vault をアクセスポリシーから RBAC に移行する	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-migration
Azure Managed HSM の容量とスケーリングを計画する	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/scaling-guidance

制限とクォータ

トピック	URL
Azure Key Vault のログの遅延を構成および解釈する	https://learn.microsoft.com/en-us/azure/key-vault/general/logging
Azure Key Vault のスロットリング制限を理解して処理する	https://learn.microsoft.com/en-us/azure/key-vault/general/overview-throttling
Azure Key Vault と Managed HSM のサービス制限を確認する	https://learn.microsoft.com/en-us/azure/key-vault/general/service-limits
Managed HSM の IP ファイアウォールとネットワークセキュリティを構成する	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/configure-network-security
Azure Managed HSM のサービス制限とクォータを確認する	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/service-limits
Managed HSM リソースに論理的な削除と回復を使用する	https://learn.microsoft.com/en-u

📜 原文 SKILL.md(Claudeが読む英語/中国語)を展開

Azure Key Vault Skill

This skill provides expert guidance for Azure Key Vault. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L36-L44	Diagnosing and fixing Key Vault errors: REST/API error codes, access policy failures, Private Link misconfig, and Azure Policy enforcement issues.
Best Practices	L45-L55	Best practices for HSM/BYOK key generation and transfer, secure key management, disaster recovery for Managed HSM, and automating single/dual-credential secret rotation in Key Vault.
Decision Making	L56-L62	Guidance on planning key and HSM capacity, scaling, and migrating cryptographic workloads or Key Vault access control from access policies to RBAC
Limits & Quotas	L63-L73	Key Vault and Managed HSM limits: throttling, quotas, logging latency, secret size, soft-delete/recovery, and network/IP firewall configuration.
Security	L74-L98	Securing Key Vault and Managed HSM: auth, RBAC vs access policies, network/firewall/private endpoints, Zero Trust, backups/soft-delete, and hardening/security best practices.
Configuration	L99-L122	Configuring Key Vault and Managed HSM: monitoring, alerts, logging, policies, key types/rotation/secure release, BYOK imports, ARM templates, and special secret formats.
Integrations & Coding Patterns	L123-L151	How to integrate Key Vault with CAs, Event Grid, Private Link, Databricks, and use language SDKs (Go/.NET/Python/JS) for keys, secrets, certs, backup/restore, rotation, and crypto.
Deployment	L152-L155	How to deploy and provision Azure Key Vault and Managed HSM (vaults, keys, secrets) using ARM templates, Bicep, Terraform, Azure CLI, and PowerShell

Troubleshooting

Topic	URL
Resolve common Azure Key Vault error codes	https://learn.microsoft.com/en-us/azure/key-vault/general/common-error-codes
Diagnose and fix Azure Key Vault Private Link configuration issues	https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-diagnostics
Interpret Azure Key Vault REST API error codes	https://learn.microsoft.com/en-us/azure/key-vault/general/rest-error-codes
Troubleshoot Azure Policy enforcement on Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/troubleshoot-azure-policy-for-key-vault
Troubleshoot Azure Key Vault access policy failures	https://learn.microsoft.com/en-us/azure/key-vault/general/troubleshooting-access-issues

Best Practices

Topic	URL
Plan and execute BYOK HSM key transfers to Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/hsm-protected-keys
Implement BYOK HSM-protected keys for Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/hsm-protected-keys-byok
Apply secure key management practices in Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/secure-keys
Execute disaster recovery for Azure Managed HSM disruptions	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/disaster-recovery-guide
Generate and import BYOK HSM keys into Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/hsm-protected-keys-byok
Automate single-credential secret rotation with Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation
Automate dual-credential secret rotation with Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation-dual

Decision Making

Topic	URL
Plan and execute migration of cryptographic key workloads	https://learn.microsoft.com/en-us/azure/key-vault/general/migrate-key-workloads
Migrate Azure Key Vault from access policies to RBAC	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-migration
Plan capacity and scaling for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/scaling-guidance

Limits & Quotas

Topic	URL
Configure and interpret Azure Key Vault logging latency	https://learn.microsoft.com/en-us/azure/key-vault/general/logging
Understand and handle Azure Key Vault throttling limits	https://learn.microsoft.com/en-us/azure/key-vault/general/overview-throttling
Review Azure Key Vault and Managed HSM service limits	https://learn.microsoft.com/en-us/azure/key-vault/general/service-limits
Configure Managed HSM IP firewall and network security	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/configure-network-security
Review Azure Managed HSM service limits and quotas	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/service-limits
Use soft-delete and recovery for Managed HSM resources	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/soft-delete-overview
Understand Azure Key Vault secret size limits	https://learn.microsoft.com/en-us/azure/key-vault/secrets/about-secrets

Security

Topic	URL
Apply security best practices for Key Vault certificates	https://learn.microsoft.com/en-us/azure/key-vault/certificates/secure-certificates
Allow Azure Key Vault access from clients behind firewalls	https://learn.microsoft.com/en-us/azure/key-vault/general/access-behind-firewall
Prepare for Azure Key Vault RBAC default and API retirement	https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default
Assign Key Vault access policies with Azure CLI	https://learn.microsoft.com/en-us/azure/key-vault/general/assign-access-policy
Configure authentication to Azure Key Vault with Entra ID	https://learn.microsoft.com/en-us/azure/key-vault/general/authentication
Configure network security options for Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/network-security
Secure Key Vault access with virtual network service endpoints	https://learn.microsoft.com/en-us/azure/key-vault/general/overview-vnet-service-endpoints
Choose Azure RBAC vs access policies for Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-access-policy
Configure Azure RBAC permissions for Key Vault access	https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide
Apply Zero Trust security practices to Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/secure-key-vault
Configure and use Azure Key Vault soft-delete safely	https://learn.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview
Manage access control and authorization for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/access-control
Configure Azure Resource Manager access to Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/authorize-azure-resource-manager
Perform full and selective backup/restore for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/backup-restore
Use Managed HSM built-in local RBAC roles	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/built-in-roles
Implement secure access control for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/how-to-secure-access
Configure network security and firewall for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/network-security
Configure Managed HSM private endpoints with Private Link	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/private-link
Manage data plane RBAC roles for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/role-management
Harden Azure Managed HSM with security controls	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/secure-managed-hsm
Apply security best practices for Azure Key Vault secrets	https://learn.microsoft.com/en-us/azure/key-vault/secrets/secure-secrets

Configuration

Topic	URL
Configure health and throttling alerts for Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/alert
Formulate authenticated JSON requests to Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/authentication-requests-and-responses
Apply Azure Policy to govern Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/azure-policy
Enable and configure Azure Key Vault diagnostic logging	https://learn.microsoft.com/en-us/azure/key-vault/general/howto-logging
Configure monitoring for Azure Key Vault with Azure Monitor	https://learn.microsoft.com/en-us/azure/key-vault/general/monitor-key-vault
Reference for Azure Key Vault monitoring metrics and logs	https://learn.microsoft.com/en-us/azure/key-vault/general/monitor-key-vault-reference
Create Azure Key Vault using ARM template settings	https://learn.microsoft.com/en-us/azure/key-vault/general/vault-create-template
Use supported key types and algorithms in Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details
Follow BYOK specification for importing HSM keys to Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/byok-specification
Configure automatic cryptographic key rotation in Azure Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation
Author secure key release policies in Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/keys/policy-grammar
Configure health and performance alerts for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/configure-alerts
Configure automated key rotation in Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/key-rotation
Configure logging and audit events for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/logging
Monitor Azure Managed HSM with Azure Monitor	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/logging-azure-monitor
Configure multi-region replication for Azure Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/multi-region-replication
Author secure key release policies for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/policy-grammar
Configure soft-delete and purge protection for Managed HSM	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/recovery
Integrate Managed HSM logs with Microsoft Sentinel	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/sentinel
Configure Azure Key Vault to store multiline secrets	https://learn.microsoft.com/en-us/azure/key-vault/secrets/multiline-secrets

Integrations & Coding Patterns

Topic	URL
Integrate Azure Key Vault with DigiCert CA	https://learn.microsoft.com/en-us/azure/key-vault/certificates/how-to-integrate-certificate-authority
Use Go Key Vault certificates client library	https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-go
Use .NET Key Vault certificates client library	https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-net
Use Python Key Vault certificates client library	https://learn.microsoft.com/en-us/azure/key-vault/certificates/quick-create-python
Trigger Logic Apps from Key Vault events via Event Grid	https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-logicapps
Integrate Azure Key Vault events with Azure Event Grid	https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-overview
Handle Azure Key Vault notifications with Event Grid and Automation	https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-tutorial
Access Blob Storage via Databricks and Key Vault	https://learn.microsoft.com/en-us/azure/key-vault/general/integrate-databricks-blob-storage
Integrate Azure Key Vault with Azure Private Link	https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-service
Back up, delete, and restore keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-backup-delete-restore-key
Create and rotate Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-create-update-rotate-key
Enable or disable Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-enable-disable-key
Encrypt and decrypt with Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-encrypt-decrypt-key
Retrieve Azure Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-get-key
Import keys into Azure Key Vault with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-import-key
List Azure Key Vault keys using JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-list-key-version
Sign and verify with Key Vault keys in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/keys/javascript-developer-guide-sign-verify-key
Use Managed HSM TLS Offload library with F5 and Nginx	https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/tls-offload-library
Back up and restore Key Vault secrets in JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-backup-secrets
Delete and purge Key Vault secrets with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-delete-secret
Enable or disable Key Vault secrets using JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-enable-disable-secret
List and find Key Vault secrets using JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-find-secret
Retrieve Azure Key Vault secrets with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-get-secret
Use Azure Key Vault secrets from JavaScript applications	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-get-started
Create, update, and rotate Key Vault secrets with JavaScript	https://learn.microsoft.com/en-us/azure/key-vault/secrets/javascript-developer-guide-set-update-rotate-secret

Deployment

Topic	URL
Provision Key Vault and key using Terraform	https://learn.microsoft.com/en-us/azure/key-vault/keys/quick-create-terraform