CyberArk Secrets Hub Educational Scripts

Proof of Concept - Educational PowerShell scripts for CyberArk Secrets Hub API integration.

Purpose

Learning-focused scripts demonstrating enterprise API patterns. AWS/ASM secret types only.

Quick Start

# Download scripts to your local directory
# Authenticate to your CyberArk tenant
.\Connect-CyberArkIdentity.ps1 -Subdomain "your-tenant-name" -Username "your-username"

Common Usage Patterns

Get All Secrets (Sample)

.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -Limit 10

Find Production Secrets

.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -TagFilter @{"env"="prod"}

Find Unused Secrets (90+ days idle)

.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -IdleFilter 90

Export to CSV for Analysis

.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -Export "secrets-report.csv"

Complex Filtering Examples

# Development secrets unused for 30+ days
.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -TagFilter @{"env"="dev"} -IdleFilter 30

# Production secrets in specific region
.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -TagFilter @{"env"="prod"; "region"="us-east-1"}

Debug Mode (Learning)

.\Connect-CyberArkIdentity.ps1 -Subdomain "acme" | .\Get-SecretsHubMetadata.ps1 -DebugMode -Limit 5

Learning Resources

📚 Read the source code - extensive educational comments explain enterprise API patterns, authentication, pagination, and filtering techniques.

Requirements

• PowerShell 5.1+
• CyberArk Identity tenant access
• AWS Secrets Manager integration (other secret types not supported)

Disclaimer

Educational proof of concept only. Not production-ready.