Decrypting the secrets of Ansible Vault in PowerShell

Ansible Vault is a pretty nifty tool that allows people to easily encrypt secrets for use in Ansible. For example I can turn something like this host_password: supersecretpass123! into this $ANSIBLE_VAULT;1.1;AES256 33343835306666636239373663396363643766613363343837646633343933376633323964663030 3134616235646661306436643134383333633730376233650a663466323032343633383061336461 36393261363338616337613039363435313631343437323164386661326633313339396238396236 3462393338636632650a653036663266373533343232393838343161396564333963643632653932 30386135636131656130346537356637396139323134386162306431376564346537633566666532 6331323061373237336639356165393563613765663864366231 When calling Ansible, you must supply the password by either manually entering it or use a password file. … [Read more…]