CyberArk Automation - Greatest Hits!

CYBRAutomation.md

CyberArk Automation - Greatest Hits!

A curated list of available resources to help you on your automation journey with CyberArk.

Webinars

• "On the Front Lines" (OTFL) Webinar: REST API From Start to Finish #1
  Link to webinar video in README
  In this webinar, we created a CyberArk Account Factory using psPAS and CredentialRetriever in 45 mins

• "On the Front Lines" (OTFL) Webinar: REST API From Start to Finish #2
  Link to webinar video in README
  In this webinar, we created a CyberArk Safe Factory using psPAS and CredentialRetriever in 45 mins

• "On the Front Lines" (OTFL) Webinar: How to Secure Ansible Automation Environments with CyberArk"
  In this webinar, we go over all the available integrations with Red Hat's Ansible Automation Platform.

Videos

• CyberArk YouTube Curated Playlist by InfamousJoeG
  A curated collection of videos covering CyberArk PAS, AAM, Conjur, and Secretless

• CyberArk Central Credential Provider - Install, Configure, Test
  CyberArk's Joe Garcia takes the Application Access Manager's Central Credential Provider and installs it from end-to-end.

• CyberArk Central Credential Provider - Client Certificate Authentication
  CyberArk's Joe Garcia takes the Central Credential Provider and configures it for Client Certificate Authentication.

CyberArk Community Utilities

• cybr-cli
  A "Swiss Army Knife" command-line interface (CLI) for easy human and non-human interaction with @cyberark suite of products.

• Summon
  CLI that provides on-demand secrets access for common DevOps tools.

• conceal
  Conceal is a command-line utility that eases the interaction between developer and OSX Keychain Access. It is the open-source companion to Summon as every secret added using this tool into Keychain is added using Summon-compliant formatting.

• Secretless Broker
  Secretless Broker is a connection broker which relieves client applications of the need to directly handle secrets to target services such as databases, web services, SSH connections, or any other TCP-based service.

• AAM CCP Harden Utility
  A utility built in PowerShell that automates the hardening of the AAM CCP AIMWebService App ID.

• CyberArk Conjur & DAP Variable Setter & Getter Bash
  Submitted by: @jodyhuntatx
  A Bash script that uses Conjur/DAP's REST API to set and get secret variables

• PS-SAML-Interactive by allynl93
  A PowerShell module which allows you to interactively authenticate to your SAML IDP, including most MFA options, and return the SAML Response for use in other calls.

• Windows Account Creation & Onboarding (WACO)
  Create Local or Active Directory user accounts and immediately onboard them into CyberArk PAS

• RDCMan PSM Connection Builder
  Submitted by: Joe Arida, Customer Success
  Create PSM RDP Proxy Connections for RDCMan on-demand for easy population of frequently used endpoints

• CyberArk RDPFile Connector
  Submitted by: Pranav Chugh
  A GUI-based connector for PSM to replace Microsoft RDCMan

REST API

• CyberArk REST API on Postman
  Live documentation for CyberArk's REST API (All versions)

• cyberark-examples on GitHub
  Raw Examples without Modules of how to interact with CyberArk's PAS REST API

• PowerShell Example of SAML Authentication Logon
  A PowerShell example of how to initiate SAML authentication using the PVWA and no IdP requests

• Recommended Best Practice for Protecting Credentials in PowerShell
  A sample PowerShell script that shows the recommended best practice for securing credentials

• epv-api-scripts on GitHub
  Home to the Account Onboarding Utility

• Search for Missing Safe Member and Add
  Iterate through series of safes looking for a specific safe member and apply it to the safe, if it doesn't already exist.

• Helpful One-Liners using psPAS & PowerShell
  A collection of one line commands using psPAS and PowerShell. Feel free to contribute!

• C++ CCP REST Call Example - Thanks @JimmyJamCABD

• Kotlin (Java) CCP REST Call Example - Thanks @JimmyJamCABD

• How to use CCP Client Certificate Authentication with Java

• Python CCP REST Call Example - No 3rd Party Modules - Thanks @JimmyJamCABD

Ansible

• CyberArk & Ansible - AAM Bi-Directional Integration
  Demonstration of retrieving and onboarding credentials in Ansible playbooks

• CyberArk & Red Hat Ansible Tower - Integrating w/ Tower Out of the Box
  In this video, I will show you how to integrate Red Hat Ansible Tower v3.5.1 or above with CyberArk's AAM Central Credential Provider (CCP) and Conjur Enterprise & Open Source.

• pas-orchestrator on GitHub
  Orchestrates the automatic deployment of PAS using Ansible

• Security at Inception: Ansible Orchestration Meets Secrets Management
  AnsibleFest Atlanta 2019 Breakout Session

• Live Demonstration of all available integrations as of Ansible Tower 3.6.1 and Ansible Core/Engine v2.9
  "On the Front Lines" (OTFL) Webinar from December 11th, 2019.

Modules

Python

• pyAIM
  CyberArk Application Access Manager Client Library for Python 3

PowerShell

• psPAS PowerShell Module for CyberArk
  PowerShell module for CyberArk Privileged Access Security Web Service REST API

• CredentialRetriever PowerShell Module for CyberArk
  Retrieve Credentials from CyberArk Central Credential Provider Web Service, or Local Credential Provider using CLIPasswordSDK

Just found this - Fantastic!