Hello @Jan Vávra ,
Thanks for reaching out and apologies for the delayed response.
No, Key Vault only charges for transactions on Key Vault. So, every successfully authenticated REST API call counts as one operation. Examples of key operations: create, import, get, list, backup, restore, delete, update, sign, verify, wrap, unwrap, encrypt and decrypt.
Therefore, Import to App Service is a single operation, and once the certificate has been successfully imported, the App Service will utilize it for SSL/TLS sessions that are not part of Key Vault operation. i.e. when you hit 10,001 SSL/TLS sessions from a browser, App services will continue to use the previously imported certificate rather than making a second import call to Key Vault.
Hope this helps.
-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.