Azure / Azure/azure-cli

Encrypt/decrypt local file with key vault

Open
#9,128 14 comments 8 reactions 2 assignees Claimed by @evelyn-ys View on GitHub
act-identity-squad customer-reported feature-request KeyVault
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

**Is your feature request related to a problem? Please describe.**
No, it is not.

**Describe the solution you'd like**
I would like to be able to encrypt sensitive files with Azure Key Vault keys same way as for example google cloud cli does:
```
gcloud kms encrypt \
--location=[LOCATION] \
--keyring=[KEY_RING] \
--key=[KEY] \
--plaintext-file=[FILEPATH_AND_FILENAME_TO_ENCRYPT] \
--ciphertext-file=[FILEPATH_AND_FILENAME].enc
```
It would be very convinient and useful in daily work.

Example expected functionality behaviour:
```
az keyvault encrypt/decrypt
--key-id
--plaintext-file
--ciphertext-file
```

**Describe alternatives you've considered**
Google kms, hashicorp vault, ansible vault. I would like to have such feature in azure cli so my organization can be fully integrated with your services.

**Additional context**
There is such a behaviour in your service API covered:
https://docs.microsoft.com/en-us/rest/api/keyvault/encrypt

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.