Every API call to the Key Vault counts as a transaction. This includes creating a key, retrieving a secret, or rotating a certificate.
To avoid "bill shock" associated with consumption-based licensing, the following strategies are recommended: azure key vault license
(Premium tier)
By upgrading to the Premium Tier, Acme gained: Every API call to the Key Vault counts as a transaction