cyberark-aws-auto-onboarding
cyberark-aws-auto-onboarding copied to clipboard
cyberark
Solutions for automatically detecting, managing and securing privileged accounts in AWS EC2
Bumps [rsa](https://github.com/sybrenstuvel/python-rsa) from 4.6 to 4.7. Changelog Sourced from rsa's changelog. Version 4.7 - released 2021-01-10 Fix #165: CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code Add padding...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.3.1 to 5.4. Changelog Sourced from pyyaml's changelog. 5.4 (2021-01-19) yaml/pyyaml#407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA yaml/pyyaml#472 -- Fix for...
Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.2 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...
When onboarding a Windows instance from a secondary AWS account, the Elasticity lambda is configured to use an AssumeRole called CyberArk-AOB-AssumeRoleForElasticityLambda in order to acquire the necessary permissions. A typo...
## Summary I believe the affected function will be [src/aws_environment_setup/aws_environment_setup.py](src/aws_environment_setup/aws_environment_setup.py). From AWS: We are contacting you regarding actions needed on your account(s) to prevent disruption to your CloudFormation stacks. Starting...
## Summary Windows instances created on a second AWS account (using execution/assume roles) fails to be onboarded. The function `instance_processing::get_instance_password_data` is unable to use the assume role provided because of...
This PR add the capability to customize *Platform Parameters* used by the lambda to onboard account. New parameters are added to the CloudFormation templates, so that the user can specify...
Updated CloudFormation templates to all be YAML. Created a Nested CloudFormation template to allow for single file deployment Updated stackset to only deploy to a current region
https://github.com/cyberark/cyberark-aws-auto-onboarding/blob/7739ad8d54ac859f35db41a92673b46992bfe70f/src/aws_environment_setup/AWSEnvironmentSetup.py#L187 Hi, I was just checking out code, haven't used or run it yet. I noticed in the line above, it uses `DEFAULT_HEADER` instead of variable `header`. Might be a...
Hi, I recently found out about the [IAM authentication capabilities of Conjur](https://docs.conjur.org/Latest/en/Content/Operations/Services/AWS_IAM_Authenticator.htm), which are compatible with lambdas object. I think it would be interesting to allow fetching the CyberArk password...