PAS Automation Example

[davidh-cyberark]

1. onboarding the admin cred to vault
2. app grabs the cred to provision the compute

• 3 code examples:

  1. creds in a config file (eg hard-coded)

  2. creds through a CP (install CP, provision creds in vault, fetch
     creds) PAS provision creds in vault, provision compute to call
     AWS to provision the compute (AWS Acces Key/Secret key)

     (when compute is created store aws key/secret in the vault)

  3. creds in conjur cloud (provision creds, fetch creds)

PAS docs: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Resources/_TopNav/cc_Home.htm

/*** discussion notes ***

• • create a safe, create an account
• • example for on-prem and for cloud Conjur
• • CLOUD example, go all in with flows, api's, etc
• • how to manage secret-zero with the Conjur cloud
• • ONPREM
• • how to manage secret-zero with cred provider
• • script for provisioning compute
• • AWS
• • VMware
• • Azure?? (stretch-goal)
    ***/