mirror of
https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering
synced 2026-02-27 18:52:18 +01:00
83 lines
3.7 KiB
PowerShell
83 lines
3.7 KiB
PowerShell
#Connect-AzAccount
|
|
|
|
class ResourceCheck {
|
|
[string] $ResourceId = ""
|
|
[string] $Location = ""
|
|
[string] $ResourceName = ""
|
|
[string] $ResourceGroup = ""
|
|
[string] $SubscriptionId = ""
|
|
[string] $SubscriptionName = ""
|
|
[string] $Tag_Team = ""
|
|
[string] $Tag_Product = ""
|
|
[string] $Tag_Environment = ""
|
|
[string] $Tag_Data = ""
|
|
[string] $Tag_Deployment = ""
|
|
[string] $Tag_CreatedOnDate = ""
|
|
[string] $Prop_EnablePurgeProtection = ""
|
|
[string] $Prop_EnableRbacAuthorization = ""
|
|
[string] $Prop_EnableSoftDelete = ""
|
|
[string] $Prop_PublicNetworkAccess = ""
|
|
}
|
|
|
|
|
|
Write-Host "======================================================================================================================================================================"
|
|
Write-Host "Creating key vault resource overview."
|
|
Write-Host "======================================================================================================================================================================"
|
|
|
|
$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
|
|
|
|
|
|
[string] $date = Get-Date -Format "yyyy-MM-dd HHmm"
|
|
$fileName = ".\$date azure_key_vaults.csv"
|
|
|
|
foreach ($subscription in $subscriptions)
|
|
{
|
|
Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"
|
|
|
|
Set-AzContext -SubscriptionId $subscription.Id
|
|
|
|
Write-Host "----------------------------------------------------------------------------------------------------------------------------------------------------------------------"
|
|
|
|
$allResourceGroups = Get-AzResourceGroup
|
|
[ResourceCheck[]]$Result = @()
|
|
|
|
foreach ($group in $allResourceGroups) {
|
|
|
|
Write-Host $group.ResourceGroupName
|
|
|
|
$allVaults = Get-AzKeyVault -ResourceGroupName $group.ResourceGroupName
|
|
|
|
foreach ($vault in $allVaults) {
|
|
|
|
$vaultWithAllProps = Get-AzKeyVault -ResourceGroupName $group.ResourceGroupName -Name $vault.VaultName
|
|
|
|
[ResourceCheck] $resourceCheck = [ResourceCheck]::new()
|
|
$resourceCheck.ResourceId = $vaultWithAllProps.ResourceId
|
|
$resourceCheck.Location = $vaultWithAllProps.Location
|
|
$resourceCheck.ResourceName = $vaultWithAllProps.VaultName
|
|
$resourceCheck.ResourceGroup = $vaultWithAllProps.ResourceGroupName
|
|
$resourceCheck.SubscriptionId = $subscription.Id
|
|
$resourceCheck.SubscriptionName = $subscription.Name
|
|
$resourceCheck.Tag_Team = $vaultWithAllProps.Tags.team
|
|
$resourceCheck.Tag_Product = $vaultWithAllProps.Tags.product
|
|
$resourceCheck.Tag_Environment = $vaultWithAllProps.Tags.environment
|
|
$resourceCheck.Tag_Data = $vaultWithAllProps.Tags.data
|
|
$resourceCheck.Tag_CreatedOnDate = $vaultWithAllProps.Tags.CreatedOnDate
|
|
$resourceCheck.Tag_Deployment = $vaultWithAllProps.Tags.drp_deployment
|
|
$resourceCheck.Prop_EnablePurgeProtection = $vaultWithAllProps.EnablePurgeProtection
|
|
$resourceCheck.Prop_EnableRbacAuthorization = $vaultWithAllProps.EnableRbacAuthorization
|
|
$resourceCheck.Prop_EnableSoftDelete = $vaultWithAllProps.EnableSoftDelete
|
|
$resourceCheck.Prop_PublicNetworkAccess = $vaultWithAllProps.PublicNetworkAccess
|
|
|
|
$Result += $resourceCheck
|
|
|
|
|
|
}
|
|
}
|
|
$Result | Export-Csv -Path $fileName -Append -NoTypeInformation
|
|
}
|
|
|
|
Write-Host "======================================================================================================================================================================"
|
|
Write-Host "Done."
|
|
|