Accessing the Secrets Vault API

The HTTP API is designed around actions or operations that you can perform programmatically on the Secrets Vault. The actions or operations are specified as part of the HTTP URL.

  • https — HTTPS TLS 1.2
  • host name — The host name or IP address where the secrets vault is deployed.
  • vault/1.0 — The service root including the API version.
  • api-name — The action, for example, CreateSecret.

To call the Secrets Vault API, you must use HTTPS with TLS 1.2. We recommend that you use the following cipher suite: ECDHE-RSA-AES256-GCM-SHA384