1# Key Vault Keys — Rust SDK Quick Reference
2 
3> Condensed from **azure-keyvault-keys-rust**. Full patterns (EC keys,
4> backup/restore, crypto operations, RBAC permissions)
5> in the **azure-keyvault-keys-rust** plugin skill if installed.
6 
7## Install
8cargo add azure_security_keyvault_keys azure_identity
9 
10## Quick Start
11```rust
12use azure_identity::DeveloperToolsCredential;
13use azure_security_keyvault_keys::KeyClient;
14let credential = DeveloperToolsCredential::new(None)?;
15let client = KeyClient::new("https://<vault>.vault.azure.net/", credential.clone(), None)?;
16```
17 
18## Best Practices
19- Use Entra ID auth — `DeveloperToolsCredential` for dev, `ManagedIdentityCredential` for production
20- Use HSM keys for sensitive workloads — hardware-protected keys
21- Use EC for signing — more efficient than RSA
22- Use RSA for encryption — when encrypting data
23- Backup keys for disaster recovery
24- Enable soft delete — required for production vaults
25- Use key rotation — create new versions periodically
26 
27## Non-Obvious Patterns
28```rust
29use azure_security_keyvault_keys::models::{CreateKeyParameters, KeyType};
30let params = CreateKeyParameters { kty: KeyType::Rsa, key_size: Some(2048), ..Default::default() };
31client.create_key("name", params.try_into()?, None).await?.into_model()?;
32```
33