# Azure Key Vault

This tutorial explains what is and how we can create an Azure Key Vault.

Azure Key Vault is a cloud service that provides a secure store for secrets.

You can securely store keys, passwords, certificates, and other secrets.

Azure key vaults may be created and managed through the Azure portal.

Now let's create an Azure Key Vault from the Portal.

From "All services" -> "Security", click on "Key Vaults".

Click on "+ Create".

Choose the Subscription and the Resource group name and the instance details.

Click on "Next".

Assign access policy and determine whether a given service principal, namely an application or user group, can perform different operations on key vault keys, secrets or certificates.

Under "Resource access" check a specific Resource access if needed.

Define access policies. Access policies enable you to have fine-grained control over access to vault items.

Click on "Next".

Specify how we can access the Key Vault from the network.

I will not add tags, so I will click on "Review+Create" button and after that on "Create".

In a short time, the new Key Vault will be created.