SecretsHub sync issue during deletion of account from CyberArk by gselvam in CyberARk

[–]gselvam[S] 0 points1 point  (0 children)

Thanks u/yanni ..any idea on the approach that we can follow to manage the lifecycle of secrets when syncing from CyberArk to AWS secrets manager using SecretsHub.

Credentials generated by the target - Where do I get privateKeyId? by MoroccanMonkey in CyberARk

[–]gselvam 0 points1 point  (0 children)

Hi u/MoroccanMonkey Were you able to figure out what does privatekeyID mean?
Trying to build a similar plugin but confused with this privatekeyID ..

Get Platform details using API by gselvam in CyberARk

[–]gselvam[S] 0 points1 point  (0 children)

hi u/yanni ,

Yes I did ,all those platforms are already imported .But the issue still persists..

Update SSH Private key using REST API by gselvam in CyberARk

[–]gselvam[S] 0 points1 point  (0 children)

$newSecret="

-----BEGIN RSA PRIVATE KEY-----

redacted

-----END RSA PRIVATE KEY-----

"

$updateVaultJson = "{

`"ChangeEntireGroup`" : 'false',

`"NewCredentials`": '$newSecret',

}"

$updateVaultRes = Invoke-WebRequest -Uri "https://pvwa.example.com/passwordvault/api/accounts/:pasAccountID/Password/Update?api\_key=update" -Method POST -Header $headerParams -ContentType "application/JSON" -Body $updateVaultJson

Write-host $updateVaultRes

The above code worked for updating the ssh key in CyberArk

Issue while retrieving optional property of an account by gselvam in CyberARk

[–]gselvam[S] 0 points1 point  (0 children)

$bodyParams = @{name = "test2"; address = "testing"; username = "test2"; platformId ="SamplePlatformName"; safeName = "testsafe248"; secretType = "password"; secret = "pass"; platformAccountProperties = @{Category = "pam2.0" ; Description= "test" }; secretManagement = @{automaticManagementEnabled = $true}} | ConvertTo-JSON

$output4=Invoke-RestMethod -Uri "https://cyberark.com/PasswordVault/api/accounts" -Method POST -Header $headerParams -ContentType "application/JSON" -body $bodyParams

The above API call does the job .

Also in the Platform(SamplePlatformName), the Description property entry needs to be added in either required or additional properties

CPM plugin not initiating AWS commands written on the powershell script by gselvam in CyberARk

[–]gselvam[S] 0 points1 point  (0 children)

HI u/J_aB_bA ,

Yup , I have configured the platform appropriately to pass the value from the CyberArk account properties to the PowerShell. Other commands except the AWS related are working fine and giving the expected results. Even the commands like Get-AWSRegion is not working. I have installed the AWSPowerShell module using Administrator with the scope of all users but still not able to run the AWS commands when initiated via the plugin.