Skip to content

Latest commit

 

History

History
68 lines (54 loc) · 2.59 KB

db_account.md

File metadata and controls

68 lines (54 loc) · 2.59 KB
Raw
page_title subcategory description
cyberark_db_account Resource - cyberark
Database Account Resource This resource is responsible for creating a new privileged account that contains all the required DB information as mentioned below in Privilege Cloud. For more information click here https://docs.cyberark.com/privilege-cloud-shared-services/latest/en/Content/WebServices/Add%20Account%20v10.htm.

cyberark_db_account (Resource)

Database Account Resource

This resource is responsible for creating a new privileged account that contains all the required DB information as mentioned below in Privilege Cloud.

For more information click here.

Example Usage

variable "secret_key" {
  type      = string
  sensitive = true
}

resource "cyberark_db_account" "pgdb" {
  name                        = "user-db"
  address                     = "1.2.3.4"
  username                    = "user-db"
  platform                    = "MySQL"
  safe                        = "TF_TEST_SAFE"
  secret                      = var.secret_key
  secret_name_in_secret_store = "user"
  sm_manage                   = false
  sm_manage_reason            = "No CPM Associated with Safe."
  db_port                     = "8432"
  db_dsn                      = "dsn"
  dbname                      = "dbo.services"
}

Schema

Required

  • address (String) URI, URL or IP associated with the credential.
  • name (String) Custom Account Name for customizing the object name in a safe.
  • platform (String) Management Platform associated with the Database Credential.
  • safe (String) Target Safe where the credential object will be onboarded.
  • secret (String, Sensitive) Password of the credential object.
  • username (String) Username of the Credential object.

Optional

  • db_dsn (String) Database data source name.
  • db_port (String) Database connection port.
  • dbname (String) Database name.
  • secret_name_in_secret_store (String) Name of the credential object.
  • sm_manage (Boolean) Automatic Management of a credential. Optional Value.
  • sm_manage_reason (String) If sm_manage is false, provide reason why credential is not managed.

Read-Only

  • id (String) CyberArk Privilege Cloud Credential ID- Generated from CyberArk after onboarding account into a safe.
  • last_updated (String)
  • secret_type (String) Should always be 'password' for Database Credential.