Search code examples
azureterraformazure-keyvault

Terraform with Azure Key Vault to get secret value


Is there any way to get the value of a secret from Azure Key Vault?

Doesn't look like value gets exposed in the key vault secret object here.


Solution

  • Now you can do it with azurerm_key_vault_secret data source.

    I'm enjoying without any scripting.

    data "azurerm_key_vault" "example" {
      name                = "mykeyvault"
      resource_group_name = "some-resource-group"
    }
    
    data "azurerm_key_vault_secret" "test" {
      name      = "secret-sauce"
      key_vault_id = data.azurerm_key_vault.example.id
    
      # vault_uri is deprecated in latest azurerm, use key_vault_id instead.
      # vault_uri = "https://mykeyvault.vault.azure.net/"
    }
    
    output "secret_value" {
      value = "${data.azurerm_key_vault_secret.test.value}"
    }