AzVaultCopy

Exports secrets and certs from one Key Vault and import to another on same Entra Tenants or across 2 different Tenants

Features

• Python 3.11 cmdline tool
• exports not only latest objects, but also all older versions that is enabled, Exportable and not expired
• Displays a summary report of what has and has not been exported or imported on console
• supports exporting all versions of certs and secrets on local drive, while importing to destination vault
• supports exporting objects to local drive only and skip importing to destination vault

Authentication & Authorization

Repeat the 2 steps if destination vault is in a different Entra Tenant

1. sign in using either an Azure user account or service principal

   • user account az login --tenant {tenant id}

   • service principal az login --service-principal -u -p --tenant {tenant id}

2. get access token:
   az account get-access-token --scope https://vault.azure.net/.default --query "accessToken"

Usage