Skip to content

Latest commit

 

History

History
66 lines (52 loc) · 2.36 KB

aws_account.md

File metadata and controls

66 lines (52 loc) · 2.36 KB
Raw
page_title subcategory description
cybr-sh_aws_account Resource - cybr-sh
AWS Account Resource This resource is responsible for creating a new privileged account that contains all the required AWS information as mentioned below in Privilege Cloud. For more information click here https://docs.cyberark.com/privilege-cloud-shared-services/latest/en/Content/WebServices/Add%20Account%20v10.htm.

cybr-sh_aws_account (Resource)

AWS Account Resource

This resource is responsible for creating a new privileged account that contains all the required AWS information as mentioned below in Privilege Cloud.

For more information click here.

Example Usage

variable "secret_key" {
  type      = string
  sensitive = true
}

resource "cybr-sh_awsaccount" "awskey" {
  name               = "user-aws"
  username           = "user-aws"
  platform           = "AWS_TF"
  safe               = "TF_TEST_SAFE"
  secret             = var.secret_key
  sm_manage          = false
  sm_manage_reason   = "No CPM Associated with Safe."
  aws_kid            = "9876543210"
  aws_account_id     = "0123456789"
  aws_alias          = "aws_alias"
  aws_account_region = "us-east-2"
}

Schema

Required

  • aws_account_id (String) AWS Account ID Number.
  • aws_kid (String) AWS Access Key ID.
  • name (String) Custom Account Name for customizing the object name in a safe.
  • platform (String) Management Platform associated with the Database Credential.
  • safe (String) Target Safe where the credential object will be onboarded.
  • secret (String, Sensitive) Secret Key of the credential object.
  • username (String) Username of the Credential object.

Optional

  • aws_account_region (String) AWS Region.
  • aws_alias (String) AWS Account Alias.
  • sm_manage (Boolean) Automatic Management of a credential. Optional Value.
  • sm_manage_reason (String) If sm_manage is false, provide reason why credential is not managed.

Read-Only

  • id (String) CyberArk Privilege Cloud Credential ID- Generated from CyberArk after onboarding account into a safe.
  • last_updated (String)
  • secret_type (String) Should always be 'key' for AWS Accounts.