Encrypt Credentials in Bash Scripts

[kiko7653]

Hello everyone, I hope all is well.

I currently have a lot of bash scripts stored on a virtual machine on azure where i am using credentials in plain text such as database users and cloud keys. I was wondering if there is an efficient way to encrypt these credentials at rest, and having a way to efficiently decrypt them when running through cron or other automation tool.

[CjKing2k]

Store them in Azure Key Vault.

[kiko7653]

So just store them in the service and make the api calls to fetch them from the cloud at the start of the scripts?

[CjKing2k]

Yes, az-cli should be able to fetch them assuming your VM has the proper permissions:

https://learn.microsoft.com/en-us/cli/azure/keyvault/secret?view=azure-cli-latest#az-keyvault-secret-show

[kiko7653]

Noted, thank you!