replicatesecrets.ps1

replicatesecrets.ps1

param(
  [Parameter(Mandatory=$true)]
  $sourceKeyVaultName,
  [Parameter(Mandatory=$true)]
  $destinationKeyvaultName
)
Function ExportAllKeys
{
  param ($sourceKeyVaultName, $destinationKeyVaultName)
  Write-Output "Exporting from $sourceKeyVaultName to $destinationKeyVaultName"
  $destinationKeyVault = Get-AzureRMKeyVault -name $destinationKeyVaultName
  $secrets = Get-AzureKeyVaultSecret -VaultName $sourceKeyVaultName
  write-Output "Found $secrets in $sourceKeyVaultName"
  foreach ($secretin$secrets)
  {
    Write-Output "Exporting $secret"
    $secret = Get-AzureKeyVaultSecret -VaultName $sourceKeyVaultName -Name $secret.Name
    Set-AzureKeyVaultSecret -VaultName $destinationKeyVault.VaultName -Name $secret.Name -SecretValue $secret.SecretValue -Tag $secret.Tags -ContentType $secret.ContentType
  }
}
"Logging in to Azure..."
$Conn = Get-AutomationConnection -Name AzureRunAsConnection
Add-AzureRMAccount -ServicePrincipal -Tenant $Conn.TenantID -ApplicationId $Conn.ApplicationID -CertificateThumbprint $Conn.CertificateThumbprint
"Selecting Azure subscription..."
Select-AzureRmSubscription -SubscriptionId $Conn.SubscriptionID -TenantId $Conn.tenantid
ExportAllKeys -sourceKeyVaultName $sourceKeyVaultName -destinationKeyVaultName $destinationKeyvaultName