vault-policy-search-secret.sh

vault-policy-search-secret.sh

#!/bin/bash

DATABASES=("db/postdb" "db/camunda" "secret/mydb")

read_policy() {
    local policy_name=$1
    local policy_content=$(vault policy read $policy_name)

    echo "$policy_content" | while read -r line; do
        for database in "${DATABASES[@]}"; do
            if [[ $line == *"$database"* ]]; then
                echo "Policy $policy_name found database: $database"
                break
            fi
        done
    done
}

policies=$(vault policy list)

for policy_name in $policies; do
    read_policy $policy_name
done