AzureVMCredentialRotation
Commands
The runbook Azure Automation executes, and the module commands behind it, with their syntax, parameters, permissions and examples. Generated from the module's own help, so this page and Get-Help cannot disagree.
The runbook
What Azure Automation runs on the schedule. It authenticates, reads its settings from the automation variables, and calls the module.
The module
The commands the runbook calls, and the same ones you can run locally after Install-Module AzureVMCredentialRotation.
Get-RotationCandidateWorks out which credentials on the given machines need rotating.Needs Key Vault Secrets User on the vaultInvoke-CredentialRotationRotates the credentials that are due on the machines you give it.Needs Key Vault Secrets Officer on the vault, and Virtual Machine Contributor on each machine or its resource groupUpdate-VMCredentialRotates one credential on one VM and stores it in Key Vault.Needs Key Vault Secrets Officer on the vault, and Virtual Machine Contributor on the machineRegister-CredentialAccessBrings the expiry date forward for secrets a human has read.Needs Key Vault Secrets Officer on the vault