New key vault and web app settings

2026-02-27 18:52:18 +01:00 · 2024-03-12 17:32:15 +01:00
parent ceeee5a420
commit c1f54bf0f8
9 changed files with 305 additions and 30 deletions
--- a/Powershell/Lists/Azure/KeyVaults.ps1
+++ b/Powershell/Lists/Azure/KeyVaults.ps1
@@ -0,0 +1,84 @@
+#Connect-AzAccount
+
+class ResourceCheck {
+    [string] $ResourceId = ""
+    [string] $Location = ""
+    [string] $ResourceName = ""
+    [string] $ResourceGroup = ""
+    [string] $SubscriptionId = ""
+    [string] $SubscriptionName = ""
+    [string] $Tag_Team = ""
+    [string] $Tag_Product = ""
+    [string] $Tag_Environment = ""
+    [string] $Tag_Data = ""
+    [string] $Tag_Deployment = ""
+    [string] $Tag_CreatedOnDate = ""
+    [string] $Prop_EnablePurgeProtection = ""
+    [string] $Prop_EnableRbacAuthorization = ""
+    [string] $Prop_EnableSoftDelete = ""
+    [string] $Prop_PublicNetworkAccess = ""
+}
+
+
+Write-Host "======================================================================================================================================================================"
+Write-Host "Creating key vault resource overview."
+Write-Host "======================================================================================================================================================================"
+
+ $subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
+
+ 
+[string] $date = Get-Date -Format "yyyy-MM-dd HHmm"
+$fileName =  ".\$date azure_key_vaults.csv" 
+
+# rm $fileName
+
+foreach ($subscription in $subscriptions) 
+{
+    Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"
+
+    Set-AzContext -SubscriptionId $subscription.Id
+
+    Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"
+
+    $allResourceGroups = Get-AzResourceGroup
+    [ResourceCheck[]]$Result = @()
+
+    foreach ($group in $allResourceGroups) {
+
+        Write-Host $group.ResourceGroupName
+
+        $allVaults = Get-AzKeyVault -ResourceGroupName $group.ResourceGroupName
+        
+        foreach ($vault in $allVaults) {
+
+            $vaultWithAllProps = Get-AzKeyVault -ResourceGroupName $group.ResourceGroupName -Name $vault.VaultName
+
+            [ResourceCheck] $resourceCheck = [ResourceCheck]::new()
+            $resourceCheck.ResourceId = $vaultWithAllProps.ResourceId
+            $resourceCheck.Location = $vaultWithAllProps.Location
+            $resourceCheck.ResourceName = $vaultWithAllProps.VaultName
+            $resourceCheck.ResourceGroup = $vaultWithAllProps.ResourceGroupName
+            $resourceCheck.SubscriptionId = $subscription.Id
+            $resourceCheck.SubscriptionName = $subscription.Name
+            $resourceCheck.Tag_Team = $vaultWithAllProps.Tags.team
+            $resourceCheck.Tag_Product = $vaultWithAllProps.Tags.product
+            $resourceCheck.Tag_Environment = $vaultWithAllProps.Tags.environment
+            $resourceCheck.Tag_Data = $vaultWithAllProps.Tags.data
+            $resourceCheck.Tag_CreatedOnDate = $vaultWithAllProps.Tags.CreatedOnDate
+            $resourceCheck.Tag_Deployment = $vaultWithAllProps.Tags.drp_deployment
+            $resourceCheck.Prop_EnablePurgeProtection = $vaultWithAllProps.EnablePurgeProtection
+            $resourceCheck.Prop_EnableRbacAuthorization = $vaultWithAllProps.EnableRbacAuthorization
+            $resourceCheck.Prop_EnableSoftDelete = $vaultWithAllProps.EnableSoftDelete
+            $resourceCheck.Prop_PublicNetworkAccess = $vaultWithAllProps.PublicNetworkAccess
+
+            $Result += $resourceCheck
+
+          
+        }
+    }
+    $Result | Export-Csv -Path $fileName -Append -NoTypeInformation
+}
+
+Write-Host "======================================================================================================================================================================"
+Write-Host "Done."
+