Document Details
Credential Access Key Vault
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
powershell_heavy
windows_tools
missing_linux_example
windows_first
Summary
The documentation page demonstrates a strong Windows bias. All code examples are provided exclusively in PowerShell, with no equivalent Bash or Linux shell commands. Windows-specific tools and patterns (such as PowerShell cmdlets, .msi installers, and references to Windows Management Framework) are used throughout, and there is no mention of how to perform these tasks on Linux Batch nodes. The documentation assumes a Windows environment by default, and Linux alternatives are not discussed or linked.
Recommendations
- Provide equivalent Bash or Azure CLI examples for all major steps, including certificate creation, service principal setup, and Key Vault access.
- Mention and demonstrate how to install necessary tools (e.g., Azure CLI) on Linux Batch nodes, rather than only referencing PowerShell and .msi installers.
- Explicitly state support for both Windows and Linux Batch nodes, and provide parallel instructions or callouts for Linux users.
- Reference Linux tools (e.g., openssl for certificate generation) and show how to authenticate and access Key Vault from Linux scripts.
- Reorder sections or provide tabs so that Linux and Windows instructions are presented with equal prominence.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-12 00:00 | #99 | completed |
Biased
|
| 2026-01-11 06:20 | #98 | completed |
Biased
|
| 2026-01-10 00:00 | #92 | completed |
 Clean
|
| 2026-01-06 22:28 | #78 | completed |
Clean
|
| 2025-12-29 18:00 | #48 | cancelled |
Biased
|
| 2025-12-15 00:00 | #7 | completed |
Clean
|
| 2025-12-14 05:05 | #6 | completed |
Clean
|
Flagged Code Snippets
$now = [System.DateTime]::Parse("2020-02-10")
# Set this to the expiration date of the certificate
$expirationDate = [System.DateTime]::Parse("2021-02-10")
# Point the script at the cer file you created $cerCertificateFilePath = 'c:\temp\batchcertificate.cer'
$cer = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
$cer.Import($cerCertificateFilePath)
# Load the certificate into memory
$credValue = [System.Convert]::ToBase64String($cer.GetRawCertData())
# Create a new AAD application that uses this certificate
$newADApplication = New-AzureRmADApplication -DisplayName "Batch Key Vault Access" -HomePage "https://batch.mydomain.com" -IdentifierUris "https://batch.mydomain.com" -certValue $credValue -StartDate $now -EndDate $expirationDate
# Create new AAD service principal that uses this application
$newAzureAdPrincipal = New-AzureRmADServicePrincipal -ApplicationId $newADApplication.ApplicationId
Set-AzureRmKeyVaultAccessPolicy -VaultName 'BatchVault' -ServicePrincipalName '"https://batch.mydomain.com' -PermissionsToSecrets 'Get'
$psModuleCheck=Get-Module -ListAvailable -Name Azure -Refresh
if($psModuleCheck.count -eq 0) {
$psInstallerPath = Join-Path $downloadPath "azure-powershell.3.4.0.msi" Start-Process msiexec.exe -ArgumentList /i, $psInstallerPath, /quiet -wait
}
Add-AzureRmAccount -ServicePrincipal -CertificateThumbprint -ApplicationId
$adminPassword=Get-AzureKeyVaultSecret -VaultName BatchVault -Name batchAdminPass