The get calls in the azure_key_vault_secret table should not fail for…

… disabled secrets fixes #104 (#111)

azure/table_azure_key_vault_secret.go

@@ -21,7 +21,7 @@ func tableAzureKeyVaultSecret(_ context.Context) *plugin.Table {
 		Get: &plugin.GetConfig{
 			KeyColumns:        plugin.AllColumns([]string{"vault_name", "name"}),
 			Hydrate:           getKeyVaultSecret,
-			ShouldIgnoreError: isNotFoundError([]string{"ResourceNotFound", "404"}),
+			ShouldIgnoreError: isNotFoundError([]string{"ResourceNotFound", "404", "SecretDisabled"}),
 		},
 		List: &plugin.ListConfig{
 			Hydrate:       listKeyVaultSecrets,
@@ -201,6 +201,11 @@ func getKeyVaultSecret(ctx context.Context, d *plugin.QueryData, h *plugin.Hydra
 		splitID := strings.Split(*data.ID, "/")
 		vaultName = strings.Split(splitID[2], ".")[0]
 		name = splitID[4]
+
+		// Operation get is not allowed on a disabled secret
+		if !*data.Attributes.Enabled {
+			return nil, nil
+		}
 	} else {
 		vaultName = d.KeyColumnQuals["vault_name"].GetStringValue()
 		name = d.KeyColumnQuals["name"].GetStringValue()