Rust

Azure Key Vault - Setup Bootstrap Secret in Memory

See more Secrets Examples

Accessing a cloud-based secrets manager requires authentication credentials, which cannot be stored within the secrets manager itself.

This example shows how to set up an in-memory bootstrap secret with authentication credentials which will be used in other examples to access Azure Key Vault.

Note: This example requires Chilkat v10.1.0 or later.

Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let bootstrap = chilkat::Secrets::new();

// This secret will reside in memory.
bootstrap.set_location("memory");

// Specify the name of the bootstrap secret.
// service and username are required.
// appName and domain are optional.
// Note: The values are arbitrary and can be anything you want.
let json = chilkat::JsonObject::new();
let _ = json.update_string("appName", "azure_bs");
let _ = json.update_string("service", "Example");
let _ = json.update_string("username", "Joe");

// The bootstrap secret for the Azure Key Vault will contain
// the tenant_id, client_id, and client_secret, like this:
let json_secret = chilkat::JsonObject::new();
// Modify to your values.
let _ = json_secret.update_string("tenant_id", "YOUR_TENANT_ID");
let _ = json_secret.update_string("client_id", "YOUR_CLIENT_ID");
let _ = json_secret.update_string("client_secret", "YOUR_CLIENT_SECRET");

// Create or update the bootstrap secret (in memory).
// The secret is stored encrypted in memory, and is available to be used
// regardless of the lifetime of the "bootstrap" object.
if bootstrap.update_secret_json(&json, &json_secret).is_err() {
    println!("{}", bootstrap.last_error_text());
    return;
}

println!("The Azure bootstrap secret has been stored in memory.");