Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows supported ? #35

Open
edhedh opened this issue Apr 13, 2020 · 1 comment
Open

Windows supported ? #35

edhedh opened this issue Apr 13, 2020 · 1 comment

Comments

@edhedh
Copy link

edhedh commented Apr 13, 2020

When reading the documentation it states:
"CyberArk provides a solution that detects unmanaged privileged SSH Keys in new created Unix/Linux EC2 instances in Amazon Web Services (AWS) environments ..."
and
"CyberArk currently supports onboarding SSH keys for the following AWS accounts:
AWS Linux, RHL AMIs: ec2-user
Ubuntu: ubuntu user
Centos: centos user
openSuse: root user
Debian: admin user
Fedora: fedora user"

However further down it states things related to Windows EC2 instances. E.g.
"Target safe for Windows accounts, The name of the Safe to which the windows accounts will be onboarded (Note: The deployment will fail if the safe already exist)" and e.g.
"List of Windows instances that require this command to be run manually:
Microsoft Windows Server 2016 Base
Microsoft Windows Server 2016 Base with Containers ..."

I don't understand why Windows is mentioned ?
Does it mean that cyberark-aws-auto-onboarding support both Linux and windows EC2 instances or is the doco wrong ?

@yogevh
Copy link
Contributor

yogevh commented Apr 22, 2020

Thanks for reaching out,

Regarding your question:
Yes. The solution supports discovering and auto on boarding of Linux AND Windows instances. The instances can be new instances or old instances that changed their status from any status to 'Running' (we are listening to the change of instances status).
In order for the solution to on board and manage these instances - it is crucial that the Instance's Key Pair will be On Boarded first to the Key Pair safe (which is being set during the Auto On Boarding Deployment).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants