Description
Manage AWS Oracle privileged accounts. The plug-in will authenticate to an AWS Oracle Instance via Oracle's ODBC instant client.
Vendor
This platform is designed for remote account management for the following target:
| Vendor | Amazon |
|---|---|
| Product | Oracle |
| Product Category | Database |
| Product Versions | 21c |
CyberArk
This platform works with the following CyberArk versions:
| CyberArk Solution | Privileged Credentials Management |
|---|---|
| CyberArk Product | Central Policy Manager (CPM) |
| CyberArk Versions | 9.x, 10.x, 11.x, 12.x, 13.x |
| Artifact Version | 1.0 |
| Out of the Box | NO |
| Out of the Box in versions |
Support & Certification
| Support Level | STANDARD |
|---|---|
| Developed by | CyberArk |
| Certification Level | CERTIFIED |
| Connection Methods | HTTP/HTTPS |
Actions
The following table lists the supported management actions for this platform:
| Action | Supported | Permissions |
|---|---|---|
| Verify | YES | |
| Change | YES | |
| Reconcile | YES | |
| Delete | NO |
Linked Accounts
The following linked accounts are in use by the plugin.
Logon Account
| Supported | NO |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Reconcile Account
| Supported | YES |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Prerequisites
The following prerequisites are required on the machine that runs this plugin:
Oracle Instant Client 32-bit ODBC Driver (v21.12) installed on the CPM machine. Verify that the firewall rules \ ports are opened to the AWS Oracle instance by testing the ODBC Driver on the CPM machine.
After instant client installation, configure the system environment variables that will need to be configured after instant client installation.
Create your DSN connection in the TNSNAMES.ORA file in file explorer location %INSTANT_CLIENT_ROOT%/network/admin.
The TNS connection will resemble the following:
ORCL =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = <AWS Endpoint URL/IP>)(PORT = 1521))
)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = ORCL)
)
)
Configuration
Platform Settings
Specify the following parameters at the platform level:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| Port | The port used to connect to the AWS MySQL instance | Integer | 1521 |
| ConnectionCommand | The ODBC connection string which will include the ODBC Driver and connection details | Yes, No | Driver={Oracle in instantclient_21_12};Dbq=//%ADDRESS%:%PORT%/%DATABASE%;Uid=%USER%;Pwd=%LOGONPASSWORD%; |
| ChangeCommand | The legal SQL statement template that will be used to change the password on the required database. | SQL Statement | alter user %USER% identified by "%NEWPASSWORD%"; |
| ReconcileCommand | The legal SQL statement template that will be used to reconcile the password on the required database. | SQL Statement | alter user %USER% identified by "%NEWPASSWORD%"; |
| Debug | To enable debug logs | Yes, No | No |
Account Settings
Account Mandatory Parameters
Specify the following parameters on the account:
| Parameter Name | Description |
|---|---|
| Username | Username of the target account |
| Address | Address of the AWS Redshift cluster |
| DSN (ODBC) | The name of the DSN ODBC entry in the TNSNAMES files |