To create a new Key Vault, we need to provide a Name, Subscription, Resource Group, and Location. We can optionally change the Pricing tier, assign Access policies, and provide Virtual Network Access. The tier comes with two options: Standard and Premium. The only difference is that Premium supports hardware security modules (HSMs). The default policy assigned is to grant all access to the person creating the vault. You can additionally add policies as needed at any time, either during creation or later. Virtual Network Access is granted to all networks in your subscription by default, but you can edit this and grant access to specific networks only. An example of the default settings is shown here:
Creating ...
