---

az keyvault key rotation-policy

Commands

Name	Description	Type	Status
az keyvault key rotation-policy show	Get the rotation policy of a Key Vault key.	Core	GA
az keyvault key rotation-policy update	Update the rotation policy of a Key Vault key.	Core	GA

az keyvault key rotation-policy show [--hsm-name]
 [--id]
 [--name]
 [--vault-name]

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

az keyvault key rotation-policy update --value
 [--acquire-policy-token]
 [--change-reference]
 [--hsm-name]
 [--id]
 [--name]
 [--vault-name]

Examples

Set rotation policy using json file

az keyvault key rotation-policy update -n mykey --vault-name mykeyvault --value path/to/policy.json
A valid example for policy.json is:
{
 "lifetimeActions": [
 {
 "trigger": {
 "timeAfterCreate": "P90D", // ISO 8601 duration. For example: 90 days is "P90D", 3 months is "P3M", and 48 hours is "PT48H".
 "timeBeforeExpiry" : null
 },
 "action": {
 "type": "Rotate"
 }
 },
 {
 "trigger": {
 "timeBeforeExpiry" : "P30D" // ISO 8601 duration.
 },
 "action": {
 "type": "Notify"
 }
 }
 ],
 "attributes": {
 "expiryTime": "P2Y" // ISO 8601 duration.
 }
}

Required Parameters

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.