Skip to content

mpieters3/ansible-security-automation-collection

 
 

Repository files navigation

cyberark logo|

CyberArk Ansible Security Automation Collection


Collection

cyberark.pas

This collection is the CyberArk Ansible Security Automation project and can be found on ansible galaxy. This is aimed to enable the automation of securing privileged access by storing privileged accounts in the Enterprise Password Vault (EPV), controlling user's access to privileged accounts in EPV, and securely retreiving secrets using Application Access Manager (AAM). The collection includes support for Event-Driven Ansible by providing an event-source plugin for syslog and also guidance on how to use it.

The following modules will allow CyberArk administrators to automate the following tasks:

Requirements

  • Ansible Core 2.13.x or above
  • CyberArk Privileged Account Security Web Services SDK
  • CyberArk AAM Central Credential Provider (Only required for cyberark_credential)

Role Variables

None.

Modules

cyberark_authentication

  • Using the CyberArk Web Services SDK, authenticate and obtain an auth token to be passed as a variable in playbooks
  • Logoff of an authenticated REST API session
    Playbooks and Module Info

cyberark_user

  • Add a CyberArk User
  • Delete a CyberArk User
  • Update a CyberArk User's account parameters

cyberark_account

  • Add Privileged Account to the EPV
  • Delete account objects
  • Modify account properties
  • Rotatate privileged credentials
    Playbooks and Module Info

cyberark_credential

  • Using AAM Central Credential Provider (CCP), to securely retreive secrets and account properties from EPV to be registered for use in playbooks
    Playbooks and Module Info

Roles

aimprovider

Python3

  • The modules will work with either python2 or python3.

Author Information

  • CyberArk Business Development Technical Team
    • @enunez-cyberark
    • @cyberark-bizdev

About

CyberArk Ansible Security Automation Collection

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 94.4%
  • XSLT 5.6%