Description

Manage AWS MSSQL privileged accounts. The plug-in will authenticate to an AWS MSSQL RDS Instance via ODBC.

Vendor

This platform is designed for remote account management for the following target:

CyberArk

This platform works with the following CyberArk versions:

Support & Certification

Actions

The following table lists the supported management actions for this platform:

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Reconcile Account

Prerequisites

The following prerequisites are required on the machine that runs this plugin:

Microsoft SQL Server 32-bit ODBC Driver (v18.3) installed on the CPM machine. Verify that the firewall rules \ ports are opened to the AWS MSSQL instance by testing the ODBC Driver on the CPM machine

Continue with prerequisites if MSSQL is deployed on a Windows machines

You will need to import SSL certificate bundle or individual certificates for each region you have deployments or failovers. Encypt=No is no longer supported in SQL Server ODBC version 18.3.

1. Obtain your SSL certificates by navigating to the following AWS documentation
2. Scroll down to "Certificate bundles for all AWS Regions" and download the PKCS7 certificate bundle.
   1. Note: For Windows servers you must use the PKCS7 bundle instead of the pem bundle.
3. Transfer the certificate bundle to your CPM server.
4. Import certificate bundle on CPM server

   1. On the Start menu, type Run in the search box and press Enter.

   2. In the Open box, type MMC and then choose OK.

   3. In the MMC console, on the File menu, choose Add/Remove Snap-in.

   4. In the Add or Remove Snap-ins dialog box, for Available snap-ins, select Certificates, and then choose Add.

   5. In the Certificates snap-in dialog box, choose Computer account, and then choose Next.

   6. In the Select computer dialog box, choose Finish.

   7. In the Add or Remove Snap-ins dialog box, choose OK.

   8. In the MMC console, expand Certificates, open the context (right-click) menu for Trusted Root Certification Authorities, choose All Tasks, and then choose Import.

   9. On the first page of the Certificate Import Wizard, choose Next.

   10. On the second page of the Certificate Import Wizard, choose Browse. In the browse window, change the file type to All files (*.*). Locate the .pk7 file that you transferred/downloaded in step 2/3.

   11. Choose Open to select the certificate file, and then choose Next.

   12. On the third page of the Certificate Import Wizard, choose Next.

   13. On the fourth page of the Certificate Import Wizard, choose Finish. A dialog box appears indicating that the import was successful.

   14. In the MMC console, expand Certificates, expand Trusted Root Certification Authorities, and then choose Certificates. Locate the certificate to confirm it exists, as shown here.
       
       

You can read more about set up in AWS's Using SSL with a Microsoft SQL Server DB instance documentation.

Installation

Import Platform

See Import a platform package topic within CyberArk Docs online

Configuration

Platform Settings

Specify the following parameters at the platform level:

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account: