Merge pull request #112957 from DCtheGeek/dmc-ph-keyvault

Azure Policy samples - Key Vault

Author: megvanhuygen

articles/key-vault/certificates/toc.yml

@@ -18,6 +18,12 @@
   - name: Python
     href: quick-create-python.md
 
+- name: Samples
+  items:
+  - name: Azure Policy built-ins
+    displayName: samples, policies, definitions
+    href: ../policy-samples.md?toc=/azure/key-vault/certificates/toc.json&bc=/azure/key-vault/breadcrumb/toc.json
+
 - name: Tutorials 
   items:
   - name: Import a certificate

articles/key-vault/general/toc.yml

@@ -18,6 +18,12 @@
   - name:  Connect Key Vault to an Web App with a managed identity and .NET
     href: tutorial-net-create-vault-azure-web-app.md
 
+- name: Samples
+  items:
+  - name: Azure Policy built-ins
+    displayName: samples, policies, definitions
+    href: ../policy-samples.md?toc=/azure/key-vault/general/toc.json&bc=/azure/key-vault/breadcrumb/toc.json
+
 - name: Concepts 
   items:
   - name: Basic concepts

articles/key-vault/keys/toc.yml

@@ -27,6 +27,12 @@
   - name: Import HSM-protected keys(legacy)
     href: hsm-protected-keys-legacy.md
 
+- name: Samples
+  items:
+  - name: Azure Policy built-ins
+    displayName: samples, policies, definitions
+    href: ../policy-samples.md?toc=/azure/key-vault/keys/toc.json&bc=/azure/key-vault/breadcrumb/toc.json
+
 - name: Reference
   items:
   - name: Azure PowerShell

articles/key-vault/policy-samples.md

@@ -0,0 +1,33 @@
+---
+title: List of built-in policy definitions for Key Vault
+description: Lists Azure Policy built-in policy definitions for Key Vault. These built-ins provide common approaches to managing your Azure resources.
+ms.date: 04/30/2020
+ms.topic: sample
+author: msmbaldwin
+ms.author: mbaldwin
+ms.service: key-vault
+ms.custom: subject-policy-samples
+---
+# Azure Policy built-in policy definitions for Key Vault
+
+This page is an index of [Azure Policy](../governance/policy/overview.md) built-in policy
+definitions for Key Vault. For additional Azure Policy built-ins for other services, see
+[Azure Policy built-in definitions](../governance/policy/samples/built-in-policies.md).
+
+The name of each built-in links to the policy definition in Azure portal. Use the link in the
+**Source** column to view the source on the
+[Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+
+## Key Vault (service)
+
+[!INCLUDE [azure-policy-samples-service-keyvault-control](../../includes/policy/samples/byrp/microsoft.keyvault.md)]
+
+## Key Vault (objects)
+
+[!INCLUDE [azure-policy-samples-service-keyvault-data](../../includes/policy/samples/byrp/microsoft.keyvault.data.md)]
+
+## Next steps
+
+- See the built-ins on the [Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+- Review the [Azure Policy definition structure](../governance/policy/concepts/definition-structure.md).
+- Review [Understanding policy effects](../governance/policy/concepts/effects.md).

articles/key-vault/secrets/toc.yml

@@ -50,6 +50,11 @@
       href: overview-storage-keys-powershell.md
     - name: Fetch SAS tokens in code
       href: storage-keys-sas-tokens-code.md 
+- name: Samples
+  items:
+  - name: Azure Policy built-ins
+    displayName: samples, policies, definitions
+    href: ../policy-samples.md?toc=/azure/key-vault/secrets/toc.json&bc=/azure/key-vault/breadcrumb/toc.json      
 - name: Reference
   items:
   - name: Azure PowerShell