VaultProperties Class
- java.
lang. Object - com.
azure. resourcemanager. keyvault. models. VaultProperties
- com.
Implements
public final class VaultProperties
implements JsonSerializable<VaultProperties>
Properties of the vault.
Constructor Summary
Constructor | Description |
---|---|
VaultProperties() |
Creates an instance of Vault |
Method Summary
Modifier and Type | Method and Description |
---|---|
List<Access |
accessPolicies()
Get the access |
Create |
createMode()
Get the create |
Boolean |
enablePurgeProtection()
Get the enable |
Boolean |
enableRbacAuthorization()
Get the enable |
Boolean |
enableSoftDelete()
Get the enable |
Boolean |
enabledForDeployment()
Get the enabled |
Boolean |
enabledForDiskEncryption()
Get the enabled |
Boolean |
enabledForTemplateDeployment()
Get the enabled |
static
Vault |
fromJson(JsonReader jsonReader)
Reads an instance of Vault |
String |
hsmPoolResourceId()
Get the hsm |
Network |
networkAcls()
Get the network |
List<Private |
privateEndpointConnections()
Get the private |
Vault |
provisioningState()
Get the provisioning |
String |
publicNetworkAccess()
Get the public |
Sku |
sku()
Get the sku property: SKU details. |
Integer |
softDeleteRetentionInDays()
Get the soft |
UUID |
tenantId()
Get the tenant |
Json |
toJson(JsonWriter jsonWriter) |
void |
validate()
Validates the instance. |
String |
vaultUri()
Get the vault |
Vault |
withAccessPolicies(List<AccessPolicyEntry> accessPolicies)
Set the access |
Vault |
withCreateMode(CreateMode createMode)
Set the create |
Vault |
withEnablePurgeProtection(Boolean enablePurgeProtection)
Set the enable |
Vault |
withEnableRbacAuthorization(Boolean enableRbacAuthorization)
Set the enable |
Vault |
withEnableSoftDelete(Boolean enableSoftDelete)
Set the enable |
Vault |
withEnabledForDeployment(Boolean enabledForDeployment)
Set the enabled |
Vault |
withEnabledForDiskEncryption(Boolean enabledForDiskEncryption)
Set the enabled |
Vault |
withEnabledForTemplateDeployment(Boolean enabledForTemplateDeployment)
Set the enabled |
Vault |
withNetworkAcls(NetworkRuleSet networkAcls)
Set the network |
Vault |
withProvisioningState(VaultProvisioningState provisioningState)
Set the provisioning |
Vault |
withPublicNetworkAccess(String publicNetworkAccess)
Set the public |
Vault |
withSku(Sku sku)
Set the sku property: SKU details. |
Vault |
withSoftDeleteRetentionInDays(Integer softDeleteRetentionInDays)
Set the soft |
Vault |
withTenantId(UUID tenantId)
Set the tenant |
Vault |
withVaultUri(String vaultUri)
Set the vault |
Methods inherited from java.lang.Object
Constructor Details
VaultProperties
public VaultProperties()
Creates an instance of VaultProperties class.
Method Details
accessPolicies
public List
Get the accessPolicies property: An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. When `createMode` is set to `recover`, access policies are not required. Otherwise, access policies are required.
Returns:
createMode
public CreateMode createMode()
Get the createMode property: The vault's create mode to indicate whether the vault need to be recovered or not.
Returns:
enablePurgeProtection
public Boolean enablePurgeProtection()
Get the enablePurgeProtection property: Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.
Returns:
enableRbacAuthorization
public Boolean enableRbacAuthorization()
Get the enableRbacAuthorization property: Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.
Returns:
enableSoftDelete
public Boolean enableSoftDelete()
Get the enableSoftDelete property: Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.
Returns:
enabledForDeployment
public Boolean enabledForDeployment()
Get the enabledForDeployment property: Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
Returns:
enabledForDiskEncryption
public Boolean enabledForDiskEncryption()
Get the enabledForDiskEncryption property: Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
Returns:
enabledForTemplateDeployment
public Boolean enabledForTemplateDeployment()
Get the enabledForTemplateDeployment property: Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
Returns:
fromJson
public static VaultProperties fromJson(JsonReader jsonReader)
Reads an instance of VaultProperties from the JsonReader.
Parameters:
Returns:
Throws:
hsmPoolResourceId
public String hsmPoolResourceId()
Get the hsmPoolResourceId property: The resource id of HSM Pool.
Returns:
networkAcls
public NetworkRuleSet networkAcls()
Get the networkAcls property: Rules governing the accessibility of the key vault from specific network locations.
Returns:
privateEndpointConnections
public List
Get the privateEndpointConnections property: List of private endpoint connections associated with the key vault.
Returns:
provisioningState
public VaultProvisioningState provisioningState()
Get the provisioningState property: Provisioning state of the vault.
Returns:
publicNetworkAccess
public String publicNetworkAccess()
Get the publicNetworkAccess property: Property to specify whether the vault will accept traffic from public internet. If set to 'disabled' all traffic except private endpoint traffic and that that originates from trusted services will be blocked. This will override the set firewall rules, meaning that even if the firewall rules are present we will not honor the rules.
Returns:
sku
public Sku sku()
Get the sku property: SKU details.
Returns:
softDeleteRetentionInDays
public Integer softDeleteRetentionInDays()
Get the softDeleteRetentionInDays property: softDelete data retention days. It accepts >=7 and <=90.
Returns:
tenantId
public UUID tenantId()
Get the tenantId property: The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
Returns:
toJson
validate
public void validate()
Validates the instance.
vaultUri
public String vaultUri()
Get the vaultUri property: The URI of the vault for performing operations on keys and secrets.
Returns:
withAccessPolicies
public VaultProperties withAccessPolicies(List
Set the accessPolicies property: An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. When `createMode` is set to `recover`, access policies are not required. Otherwise, access policies are required.
Parameters:
Returns:
withCreateMode
public VaultProperties withCreateMode(CreateMode createMode)
Set the createMode property: The vault's create mode to indicate whether the vault need to be recovered or not.
Parameters:
Returns:
withEnablePurgeProtection
public VaultProperties withEnablePurgeProtection(Boolean enablePurgeProtection)
Set the enablePurgeProtection property: Property specifying whether protection against purge is enabled for this vault. Setting this property to true activates protection against purge for this vault and its content - only the Key Vault service may initiate a hard, irrecoverable deletion. The setting is effective only if soft delete is also enabled. Enabling this functionality is irreversible - that is, the property does not accept false as its value.
Parameters:
Returns:
withEnableRbacAuthorization
public VaultProperties withEnableRbacAuthorization(Boolean enableRbacAuthorization)
Set the enableRbacAuthorization property: Property that controls how data actions are authorized. When true, the key vault will use Role Based Access Control (RBAC) for authorization of data actions, and the access policies specified in vault properties will be ignored. When false, the key vault will use the access policies specified in vault properties, and any policy stored on Azure Resource Manager will be ignored. If null or not specified, the vault is created with the default value of false. Note that management actions are always authorized with RBAC.
Parameters:
Returns:
withEnableSoftDelete
public VaultProperties withEnableSoftDelete(Boolean enableSoftDelete)
Set the enableSoftDelete property: Property to specify whether the 'soft delete' functionality is enabled for this key vault. If it's not set to any value(true or false) when creating new key vault, it will be set to true by default. Once set to true, it cannot be reverted to false.
Parameters:
Returns:
withEnabledForDeployment
public VaultProperties withEnabledForDeployment(Boolean enabledForDeployment)
Set the enabledForDeployment property: Property to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
Parameters:
Returns:
withEnabledForDiskEncryption
public VaultProperties withEnabledForDiskEncryption(Boolean enabledForDiskEncryption)
Set the enabledForDiskEncryption property: Property to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
Parameters:
Returns:
withEnabledForTemplateDeployment
public VaultProperties withEnabledForTemplateDeployment(Boolean enabledForTemplateDeployment)
Set the enabledForTemplateDeployment property: Property to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
Parameters:
Returns:
withNetworkAcls
public VaultProperties withNetworkAcls(NetworkRuleSet networkAcls)
Set the networkAcls property: Rules governing the accessibility of the key vault from specific network locations.
Parameters:
Returns:
withProvisioningState
public VaultProperties withProvisioningState(VaultProvisioningState provisioningState)
Set the provisioningState property: Provisioning state of the vault.
Parameters:
Returns:
withPublicNetworkAccess
public VaultProperties withPublicNetworkAccess(String publicNetworkAccess)
Set the publicNetworkAccess property: Property to specify whether the vault will accept traffic from public internet. If set to 'disabled' all traffic except private endpoint traffic and that that originates from trusted services will be blocked. This will override the set firewall rules, meaning that even if the firewall rules are present we will not honor the rules.
Parameters:
Returns:
withSku
public VaultProperties withSku(Sku sku)
Set the sku property: SKU details.
Parameters:
Returns:
withSoftDeleteRetentionInDays
public VaultProperties withSoftDeleteRetentionInDays(Integer softDeleteRetentionInDays)
Set the softDeleteRetentionInDays property: softDelete data retention days. It accepts >=7 and <=90.
Parameters:
Returns:
withTenantId
public VaultProperties withTenantId(UUID tenantId)
Set the tenantId property: The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
Parameters:
Returns:
withVaultUri
public VaultProperties withVaultUri(String vaultUri)
Set the vaultUri property: The URI of the vault for performing operations on keys and secrets.
Parameters:
Returns:
Applies to
Azure SDK for Java