Azure Key Vault as first party event publisher for Azure Event Grid is now available. You can trigger automation processes - through Azure Logic Apps, Azure Functions, WebHooks, or any other handlers - by subscribing to an event whenever there is a change on the status of a key, certificate, or secret stored in Key Vault or when Key Vault access policy is changed. Secret status changes include when one of these three types are about to expire, have expired, or when there is a new version available.
Azure Event Grid event schema for Azure Key Vault
Try it out with this tutorial
Learn more in docs