New-PASPrivateSSHKey.ps1

# .ExternalHelp psPAS-help.xml
function New-PASPrivateSSHKey {
    [CmdletBinding(SupportsShouldProcess, DefaultParameterSetName = 'Personal')]
    param(
        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true,
            ParameterSetName = 'Personal'
        )]
        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true,
            ParameterSetName = 'UserID'
        )]
        [ValidateSet('PPK', 'PEM', 'OpenSSH')]
        [string[]]$formats,

        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true,
            ParameterSetName = 'Personal'
        )]
        [parameter(
            Mandatory = $false,
            ValueFromPipelinebyPropertyName = $true,
            ParameterSetName = 'UserID'
        )]
        [securestring]$keyPassword,

        [parameter(
            Mandatory = $true,
            ValueFromPipelinebyPropertyName = $true,
            ParameterSetName = 'UserID'
        )]
        [int]$UserID

    )

    BEGIN {

        Assert-VersionRequirement -RequiredVersion 12.1

    }#begin

    PROCESS {

        $URI = "$($psPASSession.BaseURI)/api/Users"

        switch ($PSCmdlet.ParameterSetName) {

            'UserID' {

                $user = $UserID
                $URI = "$URI/$UserID/Secret/SSHKeys/Cache"
                break

            }

            default {

                $user = 'Personal'
                $URI = "$URI/Secret/SSHKeys/Cache"
                break

            }

        }

        #Get Parameters to include in request
        $boundParameters = $PSBoundParameters | Get-PASParameter -ParametersToRemove UserName

        If ($PSBoundParameters.ContainsKey('keyPassword')) {

            #Include decoded password in request
            $boundParameters['keyPassword'] = $(ConvertTo-InsecureString -SecureString $keyPassword)

        }

        $body = $boundParameters | ConvertTo-Json

        if ($PSCmdlet.ShouldProcess($user, 'Generate Private SSH Key')) {

            #send request to webservice
            $result = Invoke-PASRestMethod -Uri $URI -Method POST -Body $Body

            If ($null -ne $result) {

                $result | Add-ObjectDetail -typename psPAS.CyberArk.Vault.PrivateSSHKey

            }

        }

    }#process

    END { }#end
}