You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Connect-SMTenant now performs the CyberArk Identity -> Conjur access token exchange
automatically, using the same bearer-authenticated session every other companion module shares -
no manual token is required for the common case. -ConjurAccessToken remains as an optional
override for a token obtained some other way.
Added
Initial release of IdentityCommand.SecretsManager, wrapping the CyberArk Secrets Manager, SaaS
API and the Secure Workload Access (SWA) API.
Connect-SMTenant: resolve the tenant url via platform discovery or a supplied url, then exchange
the CyberArk Identity session for a Conjur access token and set it as the module's authentication
header.
Groups and workloads: Add-SMGroupMember, Remove-SMGroupMember, Remove-SMWorkloadAnnotation, Remove-SMWorkload.
Issuers: Get-, New-, Set-, Remove-SMIssuer (AWS, GCP and Certificate Manager issuer
types), plus New-SMIssuedCertificate and New-SMSignedCertificate for Certificate Manager
issuers.
Authenticators: Get-, New-, Remove-SMAuthenticator and Set-SMAuthenticatorState.
Get-SMSecretValue: batch retrieval of up to 250 secret values.
SWA trust domains: Get-, New-, Set-, Remove-SMTrustDomain and Get-SMCABundle.
SWA server groups: Get-, New-, Set-, Remove-SMServerGroup, including GCP service account
and AWS instance identity document node attestation.