Windows Account Creation & Onboarding (WACO)

Requirements

• PowerShell
• CyberArk Application Access Manager (AAM)
• CyberArk PAS Web Services REST API
• psPAS [Linked below]

Presentation from CyberArk Impact 2019

Security at Inception: Best Practices for Managing the Credential Lifecycle with REST APIs and Automation

Video Walkthrough

PowerShell Modules/Functions Used

• psPAS by pspete
  • https://www.powershellgallery.com/packages/psPAS/2.3.0

Links to Other Great CyberArk Automation

Webinars

• "On the Front Lines" (OTFL) Webinar: REST API From Start to Finish #1
  Link to webinar video in README
  In this webinar, we created a CyberArk Account Factory using psPAS and CredentialRetriever in 45 mins

• "On the Front Lines" (OTFL) Webinar: REST API From Start to Finish #2
  Link to webinar video in README
  In this webinar, we created a CyberArk Safe Factory using psPAS and CredentialRetriever in 45 mins

REST API

• CyberArk REST API on Postman
  Live documentation for CyberArk's REST API (All versions)

• epv-api-scripts on GitHub
  Home to the Account Onboarding Utility

Ansible

• CyberArk & Ansible - AAM Bi-Directional Integration
  Demonstration of retrieving and onboarding credentials in Ansible playbooks

• pas-orchestrator on GitHub
  Orchestrates the automatic deployment of PAS using Ansible

Modules

Python

• pyAIM
  CyberArk Application Access Manager Client Library for Python 3

PowerShell

• CredentialRetriever PowerShell Module for CyberArk
  Retrieve Credentials from CyberArk Central Credential Provider Web Service, or Local Credential Provider using CLIPasswordSDK

PGP Verification