#Connect-AzAccount

class ResourceCheck {
    [string] $ResourceId = ""
    [string] $Location = ""
    [string] $ResourceName = ""
    [string] $ResourceGroup = ""
    [string] $SubscriptionId = ""
    [string] $SubscriptionName = ""
    [string] $Tag_Team = ""
    [string] $Tag_Product = ""
    [string] $Tag_Environment = ""
    [string] $Tag_Data = ""
    [string] $Tag_Deployment = ""
    [string] $Tag_CreatedOnDate = ""
    [string] $Prop_EnablePurgeProtection = ""
    [string] $Prop_EnableRbacAuthorization = ""
    [string] $Prop_EnableSoftDelete = ""
    [string] $Prop_PublicNetworkAccess = ""
}


Write-Host "======================================================================================================================================================================"
Write-Host "Creating key vault resource overview."
Write-Host "======================================================================================================================================================================"

 $subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"

 
[string] $date = Get-Date -Format "yyyy-MM-dd HHmm"
$fileName =  ".\$date azure_key_vaults.csv" 

foreach ($subscription in $subscriptions) 
{
    Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"

    Set-AzContext -SubscriptionId $subscription.Id

    Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"

    $allResourceGroups = Get-AzResourceGroup
    [ResourceCheck[]]$Result = @()

    foreach ($group in $allResourceGroups) {

        Write-Host $group.ResourceGroupName

        $allVaults = Get-AzKeyVault -ResourceGroupName $group.ResourceGroupName
        
        foreach ($vault in $allVaults) {

            $vaultWithAllProps = Get-AzKeyVault -ResourceGroupName $group.ResourceGroupName -Name $vault.VaultName

            [ResourceCheck] $resourceCheck = [ResourceCheck]::new()
            $resourceCheck.ResourceId = $vaultWithAllProps.ResourceId
            $resourceCheck.Location = $vaultWithAllProps.Location
            $resourceCheck.ResourceName = $vaultWithAllProps.VaultName
            $resourceCheck.ResourceGroup = $vaultWithAllProps.ResourceGroupName
            $resourceCheck.SubscriptionId = $subscription.Id
            $resourceCheck.SubscriptionName = $subscription.Name
            $resourceCheck.Tag_Team = $vaultWithAllProps.Tags.team
            $resourceCheck.Tag_Product = $vaultWithAllProps.Tags.product
            $resourceCheck.Tag_Environment = $vaultWithAllProps.Tags.environment
            $resourceCheck.Tag_Data = $vaultWithAllProps.Tags.data
            $resourceCheck.Tag_CreatedOnDate = $vaultWithAllProps.Tags.CreatedOnDate
            $resourceCheck.Tag_Deployment = $vaultWithAllProps.Tags.drp_deployment
            $resourceCheck.Prop_EnablePurgeProtection = $vaultWithAllProps.EnablePurgeProtection
            $resourceCheck.Prop_EnableRbacAuthorization = $vaultWithAllProps.EnableRbacAuthorization
            $resourceCheck.Prop_EnableSoftDelete = $vaultWithAllProps.EnableSoftDelete
            $resourceCheck.Prop_PublicNetworkAccess = $vaultWithAllProps.PublicNetworkAccess

            $Result += $resourceCheck

          
        }
    }
    $Result | Export-Csv -Path $fileName -Append -NoTypeInformation
}

Write-Host "======================================================================================================================================================================"
Write-Host "Done."