1# Key Vault Secrets — Rust SDK Quick Reference
2 
3> Condensed from **azure-keyvault-secrets-rust**. Full patterns (versioning,
4> update properties, tags, soft delete recovery)
5> in the **azure-keyvault-secrets-rust** plugin skill if installed.
6 
7## Install
8cargo add azure_security_keyvault_secrets azure_identity
9 
10## Quick Start
11```rust
12use azure_identity::DeveloperToolsCredential;
13use azure_security_keyvault_secrets::SecretClient;
14let credential = DeveloperToolsCredential::new(None)?;
15let client = SecretClient::new("https://<vault>.vault.azure.net/", credential.clone(), None)?;
16```
17 
18## Best Practices
19- Use Entra ID auth — `DeveloperToolsCredential` for dev, `ManagedIdentityCredential` for production
20- Use `into_model()?` to deserialize responses
21- Use `ResourceExt` trait for extracting names from IDs
22- Handle soft delete — deleted secrets can be recovered within retention period
23- Set content type — helps identify secret format
24- Use tags for organizing and filtering secrets
25- Version secrets — new values create new versions automatically
26 
27## Non-Obvious Patterns
28```rust
29use azure_security_keyvault_secrets::models::SetSecretParameters;
30let params = SetSecretParameters { value: Some("secret-value".into()), ..Default::default() };
31client.set_secret("name", params.try_into()?, None).await?.into_model()?;
32```
33