Create an overview with all key vaults in current Azure tenant for auditing reasons

AuditAllKeyVaultsInTenant.ps1

# This has been written to list all permissions to Key Vaults in the current Azure AD tenant. 
# It comes in handy if you need to do a scheduled audit e.g. for TISAX compliance reasons.

$vaults = Get-AzKeyVault

foreach ($vault  in $vaults) { 
  $detail = Get-AzKeyVault -VaultName $vault.VaultName; 
  # Expand all permissions
  $FormatEnumerationLimit = 20; 
  # Get permissions for secrets (certificates etc. not required in our case) 
  $permissions = ($detail.AccessPolicies | Format-Table -Wrap -Property DisplayName, PermissionsToSecrets | Out-String);  
  
  # create inline array to be later formatted
  @([pscustomobject]@{
    KeyVault = $detail.VaultName; 
    ResourceGroup = $detail.ResourceGroupName; 
    PermissionsToSecrets = $permissions }) | Format-Table -Wrap  
}