Skip to content

Instantly share code, notes, and snippets.

@infamousjoeg

infamousjoeg/conjur-revocation.yml

Created April 10, 2018 13:41
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save infamousjoeg/f92ee0471ce61ee8035dd53c1f9b6894 to your computer and use it in GitHub Desktop.
Save infamousjoeg/f92ee0471ce61ee8035dd53c1f9b6894 to your computer and use it in GitHub Desktop.
Download ZIP
CyberArk Conjur - Revocation of Privileges via Policy
Raw
conjur-revocation.yml
##########
# CyberArk Conjur Policy permitting access to secrets
##########
---
- !policy
id: webapp1
owner: !group devops
body:
- &variables
- !variable database_password
- !layer
- !host tomcat_host
- !grant
role: !layer
member: !host tomcat_host
- !permit
role: !layer
privileges: [ read, execute ]
resource: *variables
##########
# CyberArk Conjur Policy denying access to secrets
##########
---
- !policy
id: webapp1
owner: !group devops
body:
- &variables
- !variable database_password
- !layer
- !host tomcat_host
- !grant
role: !layer
member: !host tomcat_host
- !deny
role: !layer
privileges: [ read, execute ]
resource: *variables
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment