@microsoft/terraform-cdk-constructs 0.0.3-pre.6

package/lib/azure-keyvault/lib/certificate.js

@@ -0,0 +1,94 @@
+"use strict";
+var _a, _b;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CertificateIssuer = exports.SelfSignedCertificate = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const key_vault_certificate_1 = require("@cdktf/provider-azurerm/lib/key-vault-certificate"); // Adjust the import path based on the actual module location.
+const key_vault_certificate_issuer_1 = require("@cdktf/provider-azurerm/lib/key-vault-certificate-issuer");
+const constructs_1 = require("constructs");
+class SelfSignedCertificate extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        // Provide default values
+        const actionType = props.actionType ?? "AutoRenew";
+        const daysBeforeExpiry = props.daysBeforeExpiry ?? 45;
+        const certificate = new key_vault_certificate_1.KeyVaultCertificate(this, "AzureKeyVaultCertificate", {
+            name: props.name,
+            keyVaultId: props.keyVaultId.id,
+            certificatePolicy: {
+                issuerParameters: {
+                    name: "Self",
+                },
+                keyProperties: {
+                    keyType: "RSA",
+                    keySize: 2048,
+                    reuseKey: true,
+                    exportable: true,
+                },
+                lifetimeAction: [
+                    {
+                        action: {
+                            actionType: actionType,
+                        },
+                        trigger: {
+                            daysBeforeExpiry: daysBeforeExpiry,
+                        },
+                    },
+                ],
+                secretProperties: {
+                    contentType: "application/x-pkcs12",
+                },
+                x509CertificateProperties: {
+                    subject: props.subject,
+                    subjectAlternativeNames: {
+                        dnsNames: props.dnsNames,
+                    },
+                    keyUsage: [
+                        "cRLSign",
+                        "dataEncipherment",
+                        "digitalSignature",
+                        "keyAgreement",
+                        "keyCertSign",
+                        "keyEncipherment",
+                    ],
+                    extendedKeyUsage: ["1.3.6.1.5.5.7.3.1"],
+                    validityInMonths: 12,
+                },
+            },
+        });
+        this.certificate = certificate;
+        this.id = certificate.id;
+        this.secretId = certificate.secretId;
+        // Accumulate all the fqdn values
+        const dependencies = [];
+        for (const policy of props.accessPolicies) {
+            dependencies.push(policy.fqdn);
+        }
+        // Add dependency on all access policies
+        certificate.addOverride("depends_on", dependencies);
+    }
+}
+exports.SelfSignedCertificate = SelfSignedCertificate;
+_a = JSII_RTTI_SYMBOL_1;
+SelfSignedCertificate[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.SelfSignedCertificate", version: "0.0.3-pre.6" };
+class CertificateIssuer extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const certificateIssuer = new key_vault_certificate_issuer_1.KeyVaultCertificateIssuer(this, "AzureKeyVaultCertificate", {
+            name: props.name,
+            keyVaultId: props.keyVaultId.id,
+            providerName: props.providerName,
+        });
+        // Accumulate all the fqdn values
+        const dependencies = [];
+        for (const policy of props.accessPolicies) {
+            dependencies.push(policy.fqdn);
+        }
+        // Add dependency on all access policies
+        certificateIssuer.addOverride("depends_on", dependencies);
+    }
+}
+exports.CertificateIssuer = CertificateIssuer;
+_b = JSII_RTTI_SYMBOL_1;
+CertificateIssuer[_b] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.CertificateIssuer", version: "0.0.3-pre.6" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-keyvault/lib/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./certificate";
+export * from "./key";
+export * from "./policy";
+export * from "./secret";
+export * from "./vault";

package/lib/azure-keyvault/lib/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./certificate"), exports);
+__exportStar(require("./key"), exports);
+__exportStar(require("./policy"), exports);
+__exportStar(require("./secret"), exports);
+__exportStar(require("./vault"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvYXp1cmUta2V5dmF1bHQvbGliL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxnREFBOEI7QUFDOUIsd0NBQXNCO0FBQ3RCLDJDQUF5QjtBQUN6QiwyQ0FBeUI7QUFDekIsMENBQXdCIiwic291cmNlc0NvbnRlbnQiOlsiZXhwb3J0ICogZnJvbSBcIi4vY2VydGlmaWNhdGVcIjtcbmV4cG9ydCAqIGZyb20gXCIuL2tleVwiO1xuZXhwb3J0ICogZnJvbSBcIi4vcG9saWN5XCI7XG5leHBvcnQgKiBmcm9tIFwiLi9zZWNyZXRcIjtcbmV4cG9ydCAqIGZyb20gXCIuL3ZhdWx0XCI7XG4iXX0=

package/lib/azure-keyvault/lib/key.d.ts

@@ -0,0 +1,36 @@
+import { KeyVaultKey, KeyVaultKeyRotationPolicy } from "@cdktf/provider-azurerm/lib/key-vault-key";
+import { Construct } from "constructs";
+import { AccessPolicy } from "./policy";
+import { Vault } from "./vault";
+export interface KeyProps {
+    /**
+     * The name of the key in the Azure Key Vault.
+     */
+    readonly name: string;
+    readonly keyVaultId: Vault;
+    /**
+     * The type of key to create (e.g., RSA, EC, etc.).
+     */
+    readonly keyType: string;
+    /**
+     * The size of the key, typically specified for RSA keys.
+     */
+    readonly keySize?: number;
+    /**
+     * Additional options or attributes related to the key.
+     */
+    readonly keyOpts: string[];
+    /**
+     * The policy for key rotation.
+     */
+    readonly rotationPolicy?: KeyVaultKeyRotationPolicy;
+    /**
+     * Expiration date of the key. Format: UTC, YYYY-MM-DDTHH:MM:SSZ.
+     */
+    readonly expires?: string;
+    readonly accessPolicies: AccessPolicy[];
+}
+export declare class Key extends Construct {
+    vaultKey: KeyVaultKey;
+    constructor(scope: Construct, id: string, props: KeyProps);
+}

package/lib/azure-keyvault/lib/key.js

@@ -0,0 +1,33 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Key = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const key_vault_key_1 = require("@cdktf/provider-azurerm/lib/key-vault-key");
+const constructs_1 = require("constructs");
+class Key extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const key = new key_vault_key_1.KeyVaultKey(this, "AzureKeyVaultKey", {
+            name: props.name,
+            keyVaultId: props.keyVaultId.id,
+            keyType: props.keyType,
+            keySize: props.keySize,
+            keyOpts: props.keyOpts,
+            rotationPolicy: props.rotationPolicy,
+            expirationDate: props.expires,
+        });
+        this.vaultKey = key;
+        // Accumulate all the fqdn values
+        const dependencies = [];
+        for (const policy of props.accessPolicies) {
+            dependencies.push(policy.fqdn);
+        }
+        // Add dependency on all access policies
+        key.addOverride("depends_on", dependencies);
+    }
+}
+exports.Key = Key;
+_a = JSII_RTTI_SYMBOL_1;
+Key[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.Key", version: "0.0.3-pre.6" };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoia2V5LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL2F6dXJlLWtleXZhdWx0L2xpYi9rZXkudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7QUFBQSw2RUFHbUQ7QUFDbkQsMkNBQXVDO0FBd0N2QyxNQUFhLEdBQUksU0FBUSxzQkFBUztJQUdoQyxZQUFZLEtBQWdCLEVBQUUsRUFBVSxFQUFFLEtBQWU7UUFDdkQsS0FBSyxDQUFDLEtBQUssRUFBRSxFQUFFLENBQUMsQ0FBQztRQUVqQixNQUFNLEdBQUcsR0FBRyxJQUFJLDJCQUFXLENBQUMsSUFBSSxFQUFFLGtCQUFrQixFQUFFO1lBQ3BELElBQUksRUFBRSxLQUFLLENBQUMsSUFBSTtZQUNoQixVQUFVLEVBQUUsS0FBSyxDQUFDLFVBQVUsQ0FBQyxFQUFFO1lBQy9CLE9BQU8sRUFBRSxLQUFLLENBQUMsT0FBTztZQUN0QixPQUFPLEVBQUUsS0FBSyxDQUFDLE9BQU87WUFDdEIsT0FBTyxFQUFFLEtBQUssQ0FBQyxPQUFPO1lBQ3RCLGNBQWMsRUFBRSxLQUFLLENBQUMsY0FBYztZQUNwQyxjQUFjLEVBQUUsS0FBSyxDQUFDLE9BQU87U0FDOUIsQ0FBQyxDQUFDO1FBQ0gsSUFBSSxDQUFDLFFBQVEsR0FBRyxHQUFHLENBQUM7UUFFcEIsaUNBQWlDO1FBQ2pDLE1BQU0sWUFBWSxHQUFhLEVBQUUsQ0FBQztRQUNsQyxLQUFLLE1BQU0sTUFBTSxJQUFJLEtBQUssQ0FBQyxjQUFjLEVBQUU7WUFDekMsWUFBWSxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLENBQUM7U0FDaEM7UUFFRCx3Q0FBd0M7UUFDeEMsR0FBRyxDQUFDLFdBQVcsQ0FBQyxZQUFZLEVBQUUsWUFBWSxDQUFDLENBQUM7SUFDOUMsQ0FBQzs7QUF6Qkgsa0JBMEJDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHtcbiAgS2V5VmF1bHRLZXksXG4gIEtleVZhdWx0S2V5Um90YXRpb25Qb2xpY3ksXG59IGZyb20gXCJAY2RrdGYvcHJvdmlkZXItYXp1cmVybS9saWIva2V5LXZhdWx0LWtleVwiO1xuaW1wb3J0IHsgQ29uc3RydWN0IH0gZnJvbSBcImNvbnN0cnVjdHNcIjtcbmltcG9ydCB7IEFjY2Vzc1BvbGljeSB9IGZyb20gXCIuL3BvbGljeVwiO1xuaW1wb3J0IHsgVmF1bHQgfSBmcm9tIFwiLi92YXVsdFwiO1xuXG5leHBvcnQgaW50ZXJmYWNlIEtleVByb3BzIHtcbiAgLyoqXG4gICAqIFRoZSBuYW1lIG9mIHRoZSBrZXkgaW4gdGhlIEF6dXJlIEtleSBWYXVsdC5cbiAgICovXG4gIHJlYWRvbmx5IG5hbWU6IHN0cmluZztcblxuICByZWFkb25seSBrZXlWYXVsdElkOiBWYXVsdDtcblxuICAvKipcbiAgICogVGhlIHR5cGUgb2Yga2V5IHRvIGNyZWF0ZSAoZS5nLiwgUlNBLCBFQywgZXRjLikuXG4gICAqL1xuICByZWFkb25seSBrZXlUeXBlOiBzdHJpbmc7XG5cbiAgLyoqXG4gICAqIFRoZSBzaXplIG9mIHRoZSBrZXksIHR5cGljYWxseSBzcGVjaWZpZWQgZm9yIFJTQSBrZXlzLlxuICAgKi9cbiAgcmVhZG9ubHkga2V5U2l6ZT86IG51bWJlcjtcblxuICAvKipcbiAgICogQWRkaXRpb25hbCBvcHRpb25zIG9yIGF0dHJpYnV0ZXMgcmVsYXRlZCB0byB0aGUga2V5LlxuICAgKi9cbiAgcmVhZG9ubHkga2V5T3B0czogc3RyaW5nW107IC8vIFRoaXMgaXMgYSBndWVzcyBiYXNlZCBvbiB0aGUgbmFtZTsgYWRqdXN0IHRoZSB0eXBlIGlmIG5lZWRlZC5cblxuICAvKipcbiAgICogVGhlIHBvbGljeSBmb3Iga2V5IHJvdGF0aW9uLlxuICAgKi9cbiAgcmVhZG9ubHkgcm90YXRpb25Qb2xpY3k/OiBLZXlWYXVsdEtleVJvdGF0aW9uUG9saWN5O1xuXG4gIC8qKlxuICAgKiBFeHBpcmF0aW9uIGRhdGUgb2YgdGhlIGtleS4gRm9ybWF0OiBVVEMsIFlZWVktTU0tRERUSEg6TU06U1NaLlxuICAgKi9cbiAgcmVhZG9ubHkgZXhwaXJlcz86IHN0cmluZztcblxuICByZWFkb25seSBhY2Nlc3NQb2xpY2llczogQWNjZXNzUG9saWN5W107XG59XG5cbmV4cG9ydCBjbGFzcyBLZXkgZXh0ZW5kcyBDb25zdHJ1Y3Qge1xuICBwdWJsaWMgdmF1bHRLZXk6IEtleVZhdWx0S2V5O1xuXG4gIGNvbnN0cnVjdG9yKHNjb3BlOiBDb25zdHJ1Y3QsIGlkOiBzdHJpbmcsIHByb3BzOiBLZXlQcm9wcykge1xuICAgIHN1cGVyKHNjb3BlLCBpZCk7XG5cbiAgICBjb25zdCBrZXkgPSBuZXcgS2V5VmF1bHRLZXkodGhpcywgXCJBenVyZUtleVZhdWx0S2V5XCIsIHtcbiAgICAgIG5hbWU6IHByb3BzLm5hbWUsXG4gICAgICBrZXlWYXVsdElkOiBwcm9wcy5rZXlWYXVsdElkLmlkLFxuICAgICAga2V5VHlwZTogcHJvcHMua2V5VHlwZSxcbiAgICAgIGtleVNpemU6IHByb3BzLmtleVNpemUsXG4gICAgICBrZXlPcHRzOiBwcm9wcy5rZXlPcHRzLFxuICAgICAgcm90YXRpb25Qb2xpY3k6IHByb3BzLnJvdGF0aW9uUG9saWN5LFxuICAgICAgZXhwaXJhdGlvbkRhdGU6IHByb3BzLmV4cGlyZXMsXG4gICAgfSk7XG4gICAgdGhpcy52YXVsdEtleSA9IGtleTtcblxuICAgIC8vIEFjY3VtdWxhdGUgYWxsIHRoZSBmcWRuIHZhbHVlc1xuICAgIGNvbnN0IGRlcGVuZGVuY2llczogc3RyaW5nW10gPSBbXTtcbiAgICBmb3IgKGNvbnN0IHBvbGljeSBvZiBwcm9wcy5hY2Nlc3NQb2xpY2llcykge1xuICAgICAgZGVwZW5kZW5jaWVzLnB1c2gocG9saWN5LmZxZG4pO1xuICAgIH1cblxuICAgIC8vIEFkZCBkZXBlbmRlbmN5IG9uIGFsbCBhY2Nlc3MgcG9saWNpZXNcbiAgICBrZXkuYWRkT3ZlcnJpZGUoXCJkZXBlbmRzX29uXCIsIGRlcGVuZGVuY2llcyk7XG4gIH1cbn1cbiJdfQ==

package/lib/azure-keyvault/lib/policy.d.ts

@@ -0,0 +1,46 @@
+import { Construct } from "constructs";
+import { Vault } from "./vault";
+export interface AccessPolicyProps {
+    /**
+     * The Azure Key Vault instance or its identifier.
+     */
+    readonly keyVaultId: Vault;
+    /**
+     * The Azure Active Directory tenant ID where the Key Vault is hosted.
+     * This is typically the directory ID of your Azure AD.
+     */
+    readonly tenantId: string;
+    /**
+     * The Azure Active Directory object ID for which the policy will be applied.
+     * This can be a user, group, or service principal.
+     */
+    readonly objectId: string;
+    /**
+     * The permissions to secrets stored in the Key Vault.
+     * Possible values might include: 'get', 'list', 'set', 'delete', etc.
+     * If not provided, no secret permissions are set.
+     */
+    readonly secretPermissions?: string[];
+    /**
+     * The permissions to certificates stored in the Key Vault.
+     * Possible values might include: 'get', 'list', 'create', 'update', etc.
+     * If not provided, no certificate permissions are set.
+     */
+    readonly certificatePermissions?: string[];
+    /**
+     * The permissions to keys stored in the Key Vault.
+     * Possible values might include: 'get', 'list', 'create', 'sign', etc.
+     * If not provided, no key permissions are set.
+     */
+    readonly keyPermissions?: string[];
+    /**
+     * The permissions to storage accounts linked to the Key Vault.
+     * Possible values might include: 'get', 'list', 'delete', 'set', etc.
+     * If not provided, no storage permissions are set.
+     */
+    readonly storagePermissions?: string[];
+}
+export declare class AccessPolicy extends Construct {
+    readonly fqdn: string;
+    constructor(scope: Construct, id: string, props: AccessPolicyProps);
+}

package/lib/azure-keyvault/lib/policy.js

@@ -0,0 +1,26 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessPolicy = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const key_vault_access_policy_1 = require("@cdktf/provider-azurerm/lib/key-vault-access-policy");
+const constructs_1 = require("constructs");
+class AccessPolicy extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        const policy = new key_vault_access_policy_1.KeyVaultAccessPolicyA(this, "policy", {
+            keyVaultId: props.keyVaultId.id,
+            tenantId: props.tenantId,
+            objectId: props.objectId,
+            secretPermissions: props.secretPermissions,
+            certificatePermissions: props.certificatePermissions,
+            keyPermissions: props.keyPermissions,
+            storagePermissions: props.storagePermissions,
+        });
+        this.fqdn = "azurerm_key_vault_access_policy." + policy.friendlyUniqueId;
+    }
+}
+exports.AccessPolicy = AccessPolicy;
+_a = JSII_RTTI_SYMBOL_1;
+AccessPolicy[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.AccessPolicy", version: "0.0.3-pre.6" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-keyvault/lib/secret.d.ts

@@ -0,0 +1,39 @@
+import { Construct } from "constructs";
+import { AccessPolicy } from "./policy";
+import { Vault } from "./vault";
+/**
+ * Properties for defining an Azure Key Vault Secret.
+ */
+export interface SecretProps {
+    /**
+     * The Key Vault instance where the secret will be stored.
+     */
+    readonly keyVaultId: Vault;
+    /**
+     * The name of the secret. This name should be unique within the Key Vault instance.
+     */
+    readonly name: string;
+    /**
+     * The value of the secret. This could be any string, including tokens or passwords.
+     */
+    readonly value: string;
+    /**
+     * Optional expiration date for the secret. This should be in an appropriate date string format.
+     * If provided, the secret will become invalid after this date.
+     */
+    readonly expirationDate?: string;
+    /**
+     * Optional content type for the secret. This can be used to describe the type of information
+     * the secret contains, or how it can be used.
+     */
+    readonly contentType?: string;
+    /**
+     * A list of access policies that dictate which identities have what kind of access to the secret.
+     * Each policy should detail the permissions and the identity it applies to.
+     */
+    readonly accessPolicies: AccessPolicy[];
+}
+export declare class Secret extends Construct {
+    secretId: string;
+    constructor(scope: Construct, id: string, props: SecretProps);
+}

package/lib/azure-keyvault/lib/secret.js

@@ -0,0 +1,33 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Secret = void 0;
+const JSII_RTTI_SYMBOL_1 = Symbol.for("jsii.rtti");
+const key_vault_secret_1 = require("@cdktf/provider-azurerm/lib/key-vault-secret");
+const constructs_1 = require("constructs");
+class Secret extends constructs_1.Construct {
+    constructor(scope, id, props) {
+        super(scope, id);
+        // Logic to add the secret to the provided keyVault instance
+        // For example:
+        const secret = new key_vault_secret_1.KeyVaultSecret(this, props.name, {
+            keyVaultId: props.keyVaultId.id,
+            name: props.name,
+            value: props.value,
+            contentType: props.contentType,
+            expirationDate: props.expirationDate,
+        });
+        this.secretId = secret.id;
+        // Accumulate all the fqdn values
+        const dependencies = [];
+        for (const policy of props.accessPolicies) {
+            dependencies.push(policy.fqdn);
+        }
+        // Add dependency on all access policies
+        secret.addOverride("depends_on", dependencies);
+    }
+}
+exports.Secret = Secret;
+_a = JSII_RTTI_SYMBOL_1;
+Secret[_a] = { fqn: "@microsoft/terraform-cdk-constructs.azure_keyvault.Secret", version: "0.0.3-pre.6" };
+//# sourceMappingURL=data:application/json;base64,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

package/lib/azure-keyvault/lib/vault.d.ts

@@ -0,0 +1,94 @@
+import { KeyVault, KeyVaultNetworkAcls } from "@cdktf/provider-azurerm/lib/key-vault";
+import { KeyVaultCertificate } from "@cdktf/provider-azurerm/lib/key-vault-certificate";
+import { KeyVaultKey } from "@cdktf/provider-azurerm/lib/key-vault-key";
+import { ResourceGroup } from "@cdktf/provider-azurerm/lib/resource-group";
+import { Construct } from "constructs";
+import { AzureResource } from "../../core-azure/lib";
+export interface VaultProps {
+    /**
+     * The name of the Key Vault.
+     */
+    readonly name: string;
+    /**
+     * The Azure Region to deploy the Key Vault.
+     */
+    readonly location: string;
+    /**
+     * The name of the Azure Resource Group.
+     */
+    readonly resourceGroup: ResourceGroup;
+    /**
+     * The tags to assign to the Key Vault.
+     */
+    readonly tags?: {
+        [key: string]: string;
+    };
+    /**
+     * The tags to assign to the Key Vault.
+     */
+    readonly sku?: string;
+    /**
+     * The Name of the SKU used for this Key Vault. Possible values are standard and premium.
+     */
+    readonly tenantId: string;
+    /**
+     * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
+     */
+    readonly networkAcls?: KeyVaultNetworkAcls;
+    /**
+     * A map of IP network ACL rules. The key is the IP or IP range in CIDR notation.
+     * The value is a description of that IP range.
+     */
+    readonly purgeProtection?: boolean;
+    /**
+     *  Specifies whether protection against purge is enabled for this Key Vault.
+     * Setting this property to true activates protection against deletion of any active key, secret or certificate in the vault. The setting is effective only if soft delete is also enabled. The default value is false.
+     * Once activated, the property cannot be reverted to false.
+     */
+    readonly softDeleteRetentionDays?: number;
+}
+/**
+ * Options for granting custom access permissions in Azure Key Vault.
+ */
+export interface GrantCustomAccessOptions {
+    /**
+     * Optional: A list of permissions to grant for secrets in the Key Vault.
+     * Example permissions include 'get', 'list', 'set', 'delete', etc.
+     */
+    readonly secretPermissions?: string[];
+    /**
+     * Optional: A list of permissions to grant for certificates in the Key Vault.
+     * Example permissions include 'get', 'list', 'create', 'delete', etc.
+     */
+    readonly certificatePermissions?: string[];
+    /**
+     * Optional: A list of permissions to grant for keys in the Key Vault.
+     * Example permissions include 'encrypt', 'decrypt', 'wrapKey', 'unwrapKey', etc.
+     */
+    readonly keyPermissions?: string[];
+    /**
+     * Optional: A list of permissions to grant for storage accounts in the Key Vault.
+     * Example permissions include 'get', 'list', 'delete', 'set', 'update', etc.
+     */
+    readonly storagePermissions?: string[];
+}
+export declare class Vault extends AzureResource {
+    readonly props: VaultProps;
+    keyVault: KeyVault;
+    resourceGroup: ResourceGroup;
+    id: string;
+    private accessPolicies;
+    constructor(scope: Construct, id: string, props: VaultProps);
+    grantSecretReaderAccess(azureAdGroupId: string): void;
+    grantSecretAdminAccess(azureAdGroupId: string): void;
+    grantCertAdminAccess(azureAdGroupId: string): void;
+    grantCertReaderAccess(azureAdGroupId: string): void;
+    grantKeyAdminAccess(azureAdGroupId: string): void;
+    grantKeyReaderAccess(azureAdGroupId: string): void;
+    grantCustomAccess(azureAdGroupId: string, options: GrantCustomAccessOptions): void;
+    addSecret(keyVaultSecretName: string, secretValue: string, expirationDate?: string, contentType?: string): void;
+    addRSAKey(keyVaultKeyName: string, expirationDate?: string): KeyVaultKey;
+    addKey(keyVaultKeyName: string, keyType: string, keySize: number, keyOpts: string[], expirationDate?: string): KeyVaultKey;
+    addSelfSignedCert(certName: string, subject: string, dnsNames: string[], actionType?: string, daysBeforeExpiry?: number): KeyVaultCertificate;
+    addCertIssuer(name: string, provider: string): void;
+}