key_attestations

Creates, updates, deletes, gets or lists a key_attestations resource.

Overview

Name	key_attestations
Type	Resource
Id	azure.key_vault_keys.key_attestations

Fields

The following fields are returned by SELECT queries:

get_key_attestation

Name	Datatype	Description
attributes	object	The key management attributes.
key	object	The Json web key.
managed	boolean	True if the key's lifetime is managed by key vault. If this is a key backing a certificate, then managed will be true.
release_policy	object	The policy rules under which the key can be exported.
tags	object	Application specific metadata in the form of key-value pairs.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_key_attestation	select	key_name, key_version, vault_name		Gets the public part of a stored key along with its attestation blob. The get key attestation operation returns the key along with its attestation blob. This operation requires the keys/get permission.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
key_name	string	The name of the key to retrieve attestation for. Required.
key_version	string	Adding the version parameter retrieves attestation blob for specific version of a key. This URI fragment is optional. If not specified, the latest version of the key attestation blob is returned. Required.
vault_name	string	Key vault name. (default: )

SELECT examples

get_key_attestation

Gets the public part of a stored key along with its attestation blob. The get key attestation operation returns the key along with its attestation blob. This operation requires the keys/get permission.

SELECT
attributes,
key,
managed,
release_policy,
tags
FROM azure.key_vault_keys.key_attestations
WHERE key_name = '{{ key_name }}' -- required
AND key_version = '{{ key_version }}' -- required
AND vault_name = '{{ vault_name }}' -- required
;