azure-keyvault-py

Azure Key Vault SDK for Python provides access to Azure Key Vault's secrets, cryptographic keys, and certificate management through three separate clients: SecretClient, KeyClient, and CertificateClient. It supports both sync and async usage, versioning, soft-delete recovery, and in-vault cryptographic operations like encrypt, decrypt, sign, and verify. Storing secrets in Key Vault with RBAC and versioning removes credentials from code and config files, and vault-side cryptography means private keys never leave Azure's HSM boundary.