Description

Manage AWS MariaDB privileged accounts. The plug-in will authenticate to an AWS MariaDB Instance via MariaDB's ODBC client.

Vendor

This platform is designed for remote account management for the following target:

Vendor	Amazon
Product	MariaDB
Product Category	Database
Product Versions	10.6.14

CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution	Privileged Credentials Management
CyberArk Product	Central Policy Manager (CPM)
CyberArk Versions	9.x, 10.x, 11.x, 12.x, 13.x
Artifact Version	1.0
Out of the Box	NO
Out of the Box in versions

Support & Certification

Support Level	STANDARD
Developed by	CyberArk
Certification Level	CERTIFIED
Connection Methods	HTTP/HTTPS

Actions

The following table lists the supported management actions for this platform:

Action	Supported	Permissions
Verify	YES
Change	YES
Reconcile	YES
Delete	NO

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported	NO
Required	NO
Platforms
Permissions

Reconcile Account

Supported	YES
Required	NO
Platforms
Permissions

Prerequisites

The following prerequisites are required on the machine that runs this plugin:

MariaDB 32-bit ODBC Driver (v3.1.20) installed on the CPM machine. Verify that the firewall rules \ ports are opened to the AWS MariaDB instance by testing the ODBC Driver on the CPM machine.

Installation

Import Platform

See Import a platform package topic within CyberArk Docs online

Configuration

Platform Settings

Specify the following parameters at the platform level:

Parameter Name	Description	Acceptable Values	Default Value
Port	The port used to connect to the AWS MySQL instance	Integer	3306
ConnectionCommand	The ODBC connection string which will include the ODBC Driver and connection details	Yes, No	Driver={MariaDB ODBC 3.1 Driver};Server=%ADDRESS%;[Database=%DATABASE%;]Uid=%USER%;Pwd=%LOGONPASSWORD%;[Port=%PORT%]
ChangeCommand	The legal SQL statement template that will be used to change the password on the required database.	SQL Statement	SET PASSWORD = PASSWORD('%NEWPASSWORD%');
ReconcileCommand	The legal SQL statement template that will be used to reconcile the password on the required database.	SQL Statement	SET PASSWORD FOR '%USER%' = PASSWORD('%NEWPASSWORD%');
Debug	To enable debug logs	Yes, No	No

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter Name	Description
Username	Username of the target account
Address	Address of the AWS Redshift cluster
DSN (ODBC)	The name of the DSN entry configured in Windows