diff --git a/prepare-env.sh b/prepare-env.sh
new file mode 100755
index 0000000..f35180f
--- /dev/null
+++ b/prepare-env.sh
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+aws secretsmanager get-secret-value --secret-id Invenio | \
+  jq -r '.SecretString | fromjson | to_entries | .[] | .key + "=" + .value' > .env