❯ az keyvault show --name sigstore-key
{
  "id": "/subscriptions/3e16852e-8399-4c16-b246-16bf46bc3747/resourceGroups/ian_sandbox/providers/Microsoft.KeyVault/vaults/sigstore-key",
  "location": "eastus",
  "name": "sigstore-key",
  "properties": {
    "accessPolicies": [],
    "createMode": null,
    "enablePurgeProtection": null,
    "enableRbacAuthorization": true,
    "enableSoftDelete": true,
    "enabledForDeployment": false,
    "enabledForDiskEncryption": false,
    "enabledForTemplateDeployment": false,
    "hsmPoolResourceId": null,
    "networkAcls": {
      "bypass": "None",
      "defaultAction": "Allow",
      "ipRules": [],
      "virtualNetworkRules": []
    },
    "privateEndpointConnections": null,
    "provisioningState": "Succeeded",
    "publicNetworkAccess": "Enabled",
    "sku": {
      "family": "A",
      "name": "Standard"
    },
    "softDeleteRetentionInDays": 7,
    "tenantId": "1b4a4fed-fed8-4823-a8a0-3d5cea83d122",
    "vaultUri": "https://sigstore-key.vault.azure.net/"
  },
  "resourceGroup": "ian_sandbox",
  "systemData": {
    "createdAt": "2024-11-12T17:58:49.859000+00:00",
    "createdBy": "[email protected]",
    "createdByType": "User",
    "lastModifiedAt": "2024-11-12T17:58:49.859000+00:00",
    "lastModifiedBy": "[email protected]",
    "lastModifiedByType": "User"
  },
  "tags": {},
  "type": "Microsoft.KeyVault/vaults"
}
❯ ./sigstore-certificate-maker create \
  --kms-type azurekms \
  --kms-key-id sigstore-key \
  --kms-vault-name sigstore-key \
  --kms-tenant-id 1b4a4fed-fed8-4823-a8a0-3d5cea83d122 \
  --root-template fulcio-root-template.json \
  --intermediate-template fulcio-intermediate-template.json
{"level":"info","timestamp":"2024-11-21T09:20:53.646-0500","message":"Certificates created successfully","service":"sigstore-certificate-maker","root_cert":"https://fulcio.com","intermediate_cert":"https://fulcio.com","root_is_ca":true,"intermediate_is_ca":true,"root_path_len":1,"key_usage":"96","ext_key_usage":"[]"}