forked from scriptrunner/ActionPacks
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Get-PSSMSecret.ps1
76 lines (63 loc) · 2.27 KB
/
Get-PSSMSecret.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
#Requires -Version 5.0
#Requires -Modules Microsoft.PowerShell.SecretManagement,Microsoft.PowerShell.SecretStore
<#
.SYNOPSIS
Finds and returns a secret by name from registered vaults
.DESCRIPTION
.NOTES
This PowerShell script was developed and optimized for ScriptRunner. The use of the scripts requires ScriptRunner.
The customer or user is authorized to copy the script from the repository and use them in ScriptRunner.
The terms of use for ScriptRunner do not apply to this script. In particular, ScriptRunner Software GmbH assumes no liability for the function,
the use and the consequences of the use of this freely available script.
PowerShell is a product of Microsoft Corporation. ScriptRunner is a product of ScriptRunner Software GmbH.
© ScriptRunner Software GmbH
.COMPONENT
Requires Module Microsoft.PowerShell.SecretManagement,Microsoft.PowerShell.SecretStore
.LINK
https://github.com/scriptrunner/ActionPacks/tree/master/PowerShell Secretmanagement
.Parameter SecretName
[sr-en] Name of the secret
[sr-de] Secret-Name
.Parameter VaultName
[sr-en] Name of the vault
[sr-de] Vault-Name
.Parameter AsPlainText
[sr-en] Secret should be returned as a String
[sr-de] Secret als Text ausgeben
.Parameter StorePassword
[sr-en] Password needed to access the store
[sr-de] Kennwort für den Store Zugriff
#>
param(
[Parameter(Mandatory = $true)]
[string]$SecretName,
[securestring]$StorePassword,
[string]$VaultName,
[switch]$AsPlainText
)
Import-Module Microsoft.PowerShell.SecretManagement
Import-Module Microsoft.PowerShell.SecretStore
try{
if($null -ne $StorePassword){
Unlock-SecretStore -Password $StorePassword
}
[hashtable]$cmdArgs = @{'ErrorAction' = 'Stop'
'Name' = $SecretName
'AsPlainText' = $AsPlainText
}
if($PSBoundParameters.ContainsKey('VaultName') -eq $true){
$cmdArgs.Add('Vault',$VaultName)
}
$sec = Get-Secret @cmdArgs
if($null -ne $SRXEnv) {
$SRXEnv.ResultMessage = $sec
}
else{
Write-Output $sec
}
}
catch{
throw
}
finally{
}