diff --git a/scripts/terraform/update-secrets.sh b/scripts/terraform/update-secrets.sh
new file mode 100755
index 0000000..585b8e5
--- /dev/null
+++ b/scripts/terraform/update-secrets.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -ex
+
+cd terraform/
+
+bw get attachment secrets.sh --itemid c4f8b44e-ae62-442d-a9e0-02d0621c2454
+bw get attachment secrets.auto.tfvars --itemid c4f8b44e-ae62-442d-a9e0-02d0621c2454