Using Key-Vault RBAC (Role Based Access Control) in Azure Devops pipeline

Hi Hitesh N

To process all secrets retrieved from Azure Key Vault in a loop - encoding and decoding each one - you can use a foreach loop in PowerShell.

# Retrieve all secrets from the Key Vault
$secrets = Get-AzKeyVaultSecret -VaultName "xxxx"
# Loop through each secret, encode and decode the values
foreach ($secret in $secrets) {
    $secretName = $secret.Name
    $secretValue = Get-AzKeyVaultSecret -VaultName "xxxx" -Name $secretName -AsPlainText
    Write-Host "Original Value for $secretName: $secretValue"
    # Encoding
    $encodedSecret = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($secretValue))
    Write-Host "Encoded Value for $secretName: $encodedSecret"
    # Decoding
    $decodedValue = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($encodedSecret))
    Write-Host "Decoded Value for $secretName: $decodedValue"
}

Hope this helps!

Please Let me know if you have any queries.

If you found the information helpful, please click "Upvote" on the post to let us know and consider accepting the answer as the token of appreciation. Thank You.

@Durga Reshma Malthi Thanks Durga for your response, followed the above steps after getting the KeyVaultSecret was getting the values as ***. After encoding and decoding the secret and passing the decoded values worked.

Had Question, how to retrieve all the secrets from the KeyVault and pass it through the encoding and decoding in loop.

After the below command , was getting the output as below, how to fetch all the values of secret after the | ( which is ***), currently there are 3 secrets and how to pass it to $encodedSecret and $decodedvalue in foreach loop.

For-each *** value --> to Encode and Decode it.

$keyVaultValue = Get-AzKeyVaultSecret -VaultName "xxxx"

$keyVaultValue | % {Write-Output "$($.name) | $(Get-AzKeyVaultSecret -VaultName $.VaultName -Name $_.Name -AsPlainText)"}

Write-Host "Value of keyVaultValueSecret ": $keyVaultValueSecret

Value of keyVaultValueSecret :

DBUser | ***

DBPass | ***

DBPort | ***

#EncodedSecret

$encodedSecret = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($keyVaultValue))

#$encodedSecret = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($secret))

Write-Host "Value of encodedSecret" $encodedSecret

#DecodedSecret

$decodedvalue = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($encodedSecret))

Write-Host "Value of DecodedSecret" $decodedvalue