# Feature enhancement: Azure KeyVault Keys and Secrets

**URL:** <https://forum.ansible.com/t/feature-enhancement-azure-keyvault-keys-and-secrets/26924>\
**Category:** Ansible Developer\
**Tags:** azure\
**Created:** [March 7, 2018, 4:54pm UTC](https://forum.ansible.com/t/feature-enhancement-azure-keyvault-keys-and-secrets/26924 "2018-03-07T16:54:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Amanvir\_Mundra](https://avatars.discourse-cdn.com/v4/letter/a/b2d939/32.png) [@Amanvir\_Mundra](https://forum.ansible.com/u/Amanvir_Mundra)\
**Post date:** [March 7, 2018, 4:54pm UTC](https://forum.ansible.com/t/feature-enhancement-azure-keyvault-keys-and-secrets/26924/1 "2018-03-07T16:54:00Z")

</div>

Hi. I am very new to Ansible but I have a good experience in programming in general.

I am orchestrating infra and services on Azure using Ansible but I have hit a bit of a limitation when I needed to retrieve Account Keys (Storage, KeyVault secrets etc.) to pass between different tasks.

E.g. The new KeyVaultSecret module allows to add and delete a secret, but there is no option to retrieve Secret value. Is this by design, because of some security consideration?

I was thinking about enhancing this module ([https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/cloud/azure/azure\_rm\_keyvaultsecret.py](https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/cloud/azure/azure_rm_keyvaultsecret.py)) on the REST convention by adding another property/attribute called ‘action’.

- action: list/get/create/delete

The other option would be to create a new module, but that seems to be an overkill for such a small task.

Thought?

My linkedin: [https://www.linkedin.com/in/amanvirmundra/](https://www.linkedin.com/in/amanvirmundra/)