> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/azure-entities/azure-resource-management/keyvault.md).

# KeyVault

The **KeyVault** entity represents an Azure Key Vault resource used to safeguard cryptographic keys, secrets, and certificates.

| Field                   | Type    | Possible Operators                                             | Description                                                                          |
| ----------------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
| Guid                    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall                                        |
| ObjectID                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure Object ID of the Key Vault                                                     |
| FSName                  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                                                       |
| EnableRbacAuthorization | BOOLEAN | N/A (toggle)                                                   | Whether RBAC authorization is enabled for the Key Vault                              |
| EnableSoftDelete        | BOOLEAN | N/A (toggle)                                                   | Whether soft delete is enabled                                                       |
| Location                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure region where the Key Vault is located                                          |
| TenantID                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Tenant ID the Key Vault belongs to                                          |
| Name                    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Name of the object.                                                                  |
| risk                    | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Risk score calculated by Forestall.                                                  |
| ExposurePoint           | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Exposure point score calculated by Forestall.                                        |
| VaultUri                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | URI of the key vault used for key and secret operations.                             |
| PublicNetworkAccess     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Whether the key vault accepts traffic from public networks (`Enabled` / `Disabled`). |