Creates a new vault, creates a new service principal and attributes proper permissions to it.

az-akv-sp.azcli

# CREATING A NEW KEY VAULT
az keyvault create -g $RG --name $AKV_NAME

# CREATING A SERVICE PRINCIPAL AND STORING IT (USER AND PASSWORD) INTO AKV
az keyvault secret set \
    --vault-name $AKV_NAME \
    --name $ACR_NAME-pull-pwd \
    --value $(az ad sp create-for-rbac \
        --name $ACR_NAME-pull \
        --scopes $(az acr show --name $ACR_NAME --query id --output tsv) \
        --role acrpull \
        --query password \
        --output tsv)

az keyvault secret set \
    --name $ACR_NAME-pull-usr \
    --value $(az ad sp list --display-name $ACR_NAME-pull --query "[].appId" --output tsv) \
    --vault-name $AKV_NAME