In this first step of the demonstration, we are going to create an Azure Key Vault. We are also going to use Azure CLI for this:

1. Add the following line of code to create the Key Vault:

az keyvault create --name PacktDataEncryptionVault -g "DataEncryptionResourceGroup"

We have now created the Key Vault. In the next section, we are going to create a service principal that has permission to access the Key Vault.