Azure Key Vault
E277008
Azure Key Vault is a Microsoft Azure cloud service that securely stores and manages cryptographic keys, secrets, and certificates for protecting applications and data.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Azure Key Vault canonical | 10 |
How this entity was disambiguated
This entity first appeared as the object of triple T2555990 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Azure Key Vault Context triple: [Always Encrypted, supportsKeyStorageIn, Azure Key Vault]
-
A.
Cloud Key Management Service
Cloud Key Management Service is a Google Cloud offering that lets organizations securely create, manage, and use cryptographic keys for protecting their data and services.
-
B.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
-
C.
Azure Blob Storage
Azure Blob Storage is a cloud-based object storage service for storing and managing large amounts of unstructured data such as text and binary files.
-
D.
Azure Purview
Azure Purview is a unified data governance and catalog service from Microsoft that helps organizations discover, classify, and manage data across on-premises, multi-cloud, and SaaS sources.
-
E.
Azure
Azure is Microsoft's cloud computing platform offering a wide range of services for building, deploying, and managing applications and infrastructure through Microsoft-managed data centers.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Azure Key Vault Target entity description: Azure Key Vault is a Microsoft Azure cloud service that securely stores and manages cryptographic keys, secrets, and certificates for protecting applications and data.
-
A.
Cloud Key Management Service
Cloud Key Management Service is a Google Cloud offering that lets organizations securely create, manage, and use cryptographic keys for protecting their data and services.
-
B.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
-
C.
Azure Blob Storage
Azure Blob Storage is a cloud-based object storage service for storing and managing large amounts of unstructured data such as text and binary files.
-
D.
Azure Purview
Azure Purview is a unified data governance and catalog service from Microsoft that helps organizations discover, classify, and manage data across on-premises, multi-cloud, and SaaS sources.
-
E.
Azure
Azure is Microsoft's cloud computing platform offering a wide range of services for building, deploying, and managing applications and infrastructure through Microsoft-managed data centers.
- F. None of above. chosen
Statements (53)
| Predicate | Object |
|---|---|
| instanceOf |
certificate management service
ⓘ
cloud service ⓘ key management service ⓘ secrets management service ⓘ |
| accessControlledBy |
Azure Active Directory
ⓘ
surface form:
Azure Active Directory identities
Azure role-based access control ⓘ |
| category |
identity and access management related service
ⓘ
security service ⓘ |
| developer | Microsoft ⓘ |
| hasDeploymentModel | public cloud ⓘ |
| integratesWith |
Azure Active Directory
ⓘ
Azure App Service ⓘ Azure DevOps ⓘ Azure Disk Encryption ⓘ Azure Kubernetes Service ⓘ Azure Resource Manager ⓘ Transparent Data Encryption ⓘ
surface form:
Azure SQL Database Transparent Data Encryption
Azure Storage Encryption ⓘ Microsoft Azure Virtual Machines ⓘ
surface form:
Azure Virtual Machines
GitHub Actions ⓘ |
| operatedBy | Microsoft ⓘ |
| partOf |
Azure
ⓘ
surface form:
Microsoft Azure
|
| primaryFunction |
secure storage of certificates
ⓘ
secure storage of cryptographic keys ⓘ secure storage of secrets ⓘ |
| providedBy |
Azure
ⓘ
surface form:
Microsoft Azure
|
| storesData | encrypted at rest ⓘ |
| supports |
X.509 certificates
ⓘ
asymmetric keys ⓘ hardware security modules ⓘ secrets such as API keys ⓘ secrets such as connection strings ⓘ secrets such as passwords ⓘ symmetric keys ⓘ |
| supportsDeploymentModel |
dedicated HSM-backed vaults
ⓘ
multi-tenant ⓘ |
| supportsFeature |
access policies
ⓘ
audit logging ⓘ certificate auto-renewal ⓘ key rotation ⓘ managed identities integration ⓘ private endpoints ⓘ purge protection ⓘ role-based access control ⓘ soft delete ⓘ virtual network service endpoints ⓘ |
| supportsStandard |
FIPS 140-2 validated HSMs
ⓘ
TLS for data in transit ⓘ |
| usedFor |
centralized secrets management
ⓘ
certificate lifecycle management ⓘ key management ⓘ protecting applications ⓘ protecting data ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Azure Key Vault Description of subject: Azure Key Vault is a Microsoft Azure cloud service that securely stores and manages cryptographic keys, secrets, and certificates for protecting applications and data.
Referenced by (10)
Full triples — surface form annotated when it differs from this entity's canonical label.