---
id: object/codeunit/2200
type: object
title: Codeunit 2200 "Azure Key Vault"
summary: Codeunit 2200 "Azure Key Vault" in System Application (System.Azure.KeyVault). 4 public procedures. Present since at least BC23, still in BC30, changed in BC24.
tier: official
language: en
tags:
  - codeunit
  - system application
versions:
  introduced: null
  last_changed: "24"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: 9fcea6e9d393dac59293219c79b376396679e5d84601ac06835bbd2efc72b6c5
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Azure%20Key%20Vault/src/AzureKeyVault.Codeunit.al
    title: src/System Application/App/Azure Key Vault/src/AzureKeyVault.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: codeunit
object_id: 2200
name: Azure Key Vault
namespace: System.Azure.KeyVault
app: System Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "24"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 4
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 1
  called_by: 34
  implements: 0
---

# Codeunit 2200 "Azure Key Vault"

> Codeunit 2200 "Azure Key Vault" in System Application (System.Azure.KeyVault). 4 public procedures. Present since at least BC23, still in BC30, changed in BC24.

System Application · System.Azure.KeyVault · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Azure%20Key%20Vault/src/AzureKeyVault.Codeunit.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Access | Public |
| SingleInstance | true |

## Procedures

- `GetAzureKeyVaultSecret(SecretName: Text; var Secret: Text)`: Retrieves a secret from the key vault.
- `GetAzureKeyVaultSecret(SecretName: Text; var Secret: SecretText)`: Retrieves a secret from the key vault.
- `GetAzureKeyVaultCertificate(CertificateName: Text; var Certificate: Text)`: Retrieves a certificate from the key vault.
- `GetAzureKeyVaultCertificate(CertificateName: Text; var Certificate: SecretText)`: Retrieves a certificate from the key vault.

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 2202 "Azure Key Vault Impl."](../codeunit/2202.md) (2 calls: `GetAzureKeyVaultCertificate → GetAzureKeyVaultCertificate`, `GetAzureKeyVaultSecret → GetAzureKeyVaultSecret`)

## Called by

- [Codeunit 2004 "Machine Learning KeyVaultMgmt."](../codeunit/2004.md) (6 calls: `GetAPIUrlAndLimit → GetAzureKeyVaultSecret`, `GetAppId → GetAzureKeyVaultSecret`, `GetAuthUrl → GetAzureKeyVaultSecret`, …)
- [Codeunit 7201 "CDS Integration Impl."](../codeunit/7201.md) (5 calls: `GetCDSConnectionClientId → GetAzureKeyVaultSecret`, `GetCDSConnectionClientSecret → GetAzureKeyVaultSecret`, `GetCDSConnectionFirstPartyAppCertificate → GetAzureKeyVaultCertificate`, …)
- [Codeunit 4700 "VAT Group Communication"](../codeunit/4700.md) (4 calls: `GetClientIDAndSecretFromAKV → GetAzureKeyVaultSecret`, `GetFirstPartyAppCertificate → GetAzureKeyVaultCertificate`, `GetFirstPartyAppCertificate → GetAzureKeyVaultSecret`, …)
- [Codeunit 1686 "Email Logging OAuth Client"](../codeunit/1686.md) (3 calls: `GetApplicationType → GetAzureKeyVaultSecret`, `GetClientId → GetAzureKeyVaultSecret`, `GetClientSecret → GetAzureKeyVaultSecret`)
- [Codeunit 2020 "Image Analysis Management"](../codeunit/2020.md) (3 calls: `GetImageAnalysisCredentials → GetAzureKeyVaultSecret`, `TryAcquireOAuth2Token → GetAzureKeyVaultCertificate`, `TryAcquireOAuth2Token → GetAzureKeyVaultSecret`)
- [Codeunit 102 "Import Consolidation from API"](../codeunit/102.md) (2 calls: `GetToken → GetAzureKeyVaultCertificate`, `GetToken → GetAzureKeyVaultSecret`)
- [Codeunit 1410 "Doc. Exch. Service Mgt."](../codeunit/1410.md) (2 calls: `GetPredefinedClientId → GetAzureKeyVaultSecret`, `GetPredefinedClientSecret → GetAzureKeyVaultSecret`)
- [Codeunit 331 "No. Series Cop. Add Intent"](../codeunit/331.md) (2 calls: `GetToolDefinition → GetAzureKeyVaultSecret`, `GetToolPrompt → GetAzureKeyVaultSecret`)
- [Codeunit 334 "No. Series Cop. Change Intent"](../codeunit/334.md) (2 calls: `GetTool2Definition → GetAzureKeyVaultSecret`, `GetToolPrompt → GetAzureKeyVaultSecret`)
- [Codeunit 4399 "SOA Annotation"](../codeunit/4399.md) (2 calls: `GetIrrelevantAttachmentPrompt → GetAzureKeyVaultSecret`, `GetIrrelevantMessagePrompt → GetAzureKeyVaultSecret`)
- [Codeunit 4598 "SOA Instructions"](../codeunit/4598.md) (2 calls: `GetMailTemplateCheckSystemPrompt → GetAzureKeyVaultSecret`, `GetSOAInstructions → GetAzureKeyVaultSecret`)
- [Codeunit 7764 "AOAI Chat Messages Impl"](../codeunit/7764.md) (2 calls: `GetChatMetaprompt → GetAzureKeyVaultSecret`, `PrepareMessage → GetAzureKeyVaultSecret`)
- [Codeunit 9510 "Document Service Management"](../codeunit/9510.md) (2 calls: `GetClientId → GetAzureKeyVaultSecret`, `GetClientSecret → GetAzureKeyVaultSecret`)
- [Codeunit 1432 "Satisfaction Survey Impl."](../codeunit/1432.md) (1 call: `GetSurveyParameters → GetAzureKeyVaultSecret`)
- [Codeunit 1951 "LP Model Management"](../codeunit/1951.md) (1 call: `IsBackgroundMLLEnabled → GetAzureKeyVaultSecret`)
- [Codeunit 2011 "Entity Text AOAI Settings"](../codeunit/2011.md) (1 call: `ContainsWordsInDenyList → GetAzureKeyVaultSecret`)
- [Codeunit 2016 "Entity Text Prompts"](../codeunit/2016.md) (1 call: `GetAzureKeyVaultSecret → GetAzureKeyVaultSecret`)
- [Codeunit 20353 "Connectivity Apps Logo Mgt."](../codeunit/20353.md) (1 call: `CheckIfURLExistsAndDownloadLogo → GetAzureKeyVaultSecret`)
- [Codeunit 2501 "Extension Marketplace"](../codeunit/2501.md) (1 call: `IsMarketplaceEnabled → GetAzureKeyVaultSecret`)
- [Codeunit 2515 "AppSource Product Manager"](../codeunit/2515.md) (1 call: `SetCommonHeaders → GetAzureKeyVaultSecret`)
- [Codeunit 324 "No. Series Copilot Impl."](../codeunit/324.md) (1 call: `GetToolsSelectionSystemPrompt → GetAzureKeyVaultSecret`)
- [Codeunit 3307 "Payables Agent Setup"](../codeunit/3307.md) (1 call: `ApplyAgentInstructions → GetAzureKeyVaultSecret`)
- [Codeunit 339 "No. Series Cop. Generate"](../codeunit/339.md) (1 call: `GetTool4Definition → GetAzureKeyVaultSecret`)
- [Codeunit 349 "No. Series Cop. Nxt Yr. Intent"](../codeunit/349.md) (1 call: `GetTool3Definition → GetAzureKeyVaultSecret`)
- [Codeunit 4421 "SOA Attachment MLLM"](../codeunit/4421.md) (1 call: `TryExtractAttachmentContent → GetAzureKeyVaultSecret`)
- [Codeunit 4751 "Recommended Apps Impl."](../codeunit/4751.md) (1 call: `CheckIfURLExistsAndDownloadLogo → GetAzureKeyVaultSecret`)
- [Codeunit 6290 "Sust. Emis. Suggestion Impl."](../codeunit/6290.md) (1 call: `IsFeatureAvailable → GetAzureKeyVaultSecret`)
- [Codeunit 6297 "Sustainability Prompts"](../codeunit/6297.md) (1 call: `GetAzureKeyVaultSecret → GetAzureKeyVaultSecret`)
- [Codeunit 6941 "EA Http Client"](../codeunit/6941.md) (1 call: `GetProductionBaseUrl → GetAzureKeyVaultSecret`)
- [Codeunit 7250 "Bank Rec. AI Matching Impl."](../codeunit/7250.md) (1 call: `GetAzureKeyVaultSecret → GetAzureKeyVaultSecret`)
- [Codeunit 7276 "SLS Prompts"](../codeunit/7276.md) (1 call: `GetAzureKeyVaultSecret → GetAzureKeyVaultSecret`)
- [Codeunit 7340 "Create Product Info. Prompts"](../codeunit/7340.md) (1 call: `GetAzureKeyVaultSecret → GetAzureKeyVaultSecret`)
- [Codeunit 7774 "Copilot Capability Impl"](../codeunit/7774.md) (1 call: `IsTenantAllowedToUseAOAI → GetAzureKeyVaultSecret`)
- [Page 1830 "MS - QBO Data Migration"](../page/1830.md) (1 call: `StartAuthorizationProcess → GetAzureKeyVaultSecret`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC24

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "Azure Key Vault")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.