write powershell script for azure
Budget: $10 – $100 USD
Build a custom powershell script which will map the current environment with classes and config files and rotate the secrets in the specific keyvault and update them in the application secret path as the secrets are hard coded
We would require you to build the source and destination mapping for keyvault and the application which are using these secrets - secret path and update these as the script rotate these secrets
service principals and servicebus topic key secrets these are stored in multiple KV in multiple subs and the applications are too, so the mapping would get the source and destination
it will run via msi in a pipeline
so you would create a folder called key-rotation, in that folder create separate script folder - serviceBustopickey, and 2nd one serviceprincipal, inside each - of them
An example
-----------
servicebustopickey folder 1 classes folder 2 confif folder 3 scripts
clasess folder / constant.psm1 /Destination.psm1/Rotation.psm1 /source.psm1 files
config folder will have all the env specific .json file so that you can get the env specific information (dev.json, uat.json, prod.json)
you may create a config.rule.ps1 with resource group /resource type case sensitive etc and then the main file to run as key-rotation.ps1 bringing all together with the rotations etc intit
Note:
--------
one more thing in regards to the secret path secret naming convention - use prefix - ragex
Deadline: Today/tomorrow
We would require you to build the source and destination mapping for keyvault and the application which are using these secrets - secret path and update these as the script rotate these secrets
service principals and servicebus topic key secrets these are stored in multiple KV in multiple subs and the applications are too, so the mapping would get the source and destination
it will run via msi in a pipeline
so you would create a folder called key-rotation, in that folder create separate script folder - serviceBustopickey, and 2nd one serviceprincipal, inside each - of them
An example
-----------
servicebustopickey folder 1 classes folder 2 confif folder 3 scripts
clasess folder / constant.psm1 /Destination.psm1/Rotation.psm1 /source.psm1 files
config folder will have all the env specific .json file so that you can get the env specific information (dev.json, uat.json, prod.json)
you may create a config.rule.ps1 with resource group /resource type case sensitive etc and then the main file to run as key-rotation.ps1 bringing all together with the rotations etc intit
Note:
--------
one more thing in regards to the secret path secret naming convention - use prefix - ragex
Deadline: Today/tomorrow