Using AWS tags

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

This document explains what AWS tags can be utilized by CA PAM.

For example:
{AWS tag} ==> {AWS tag Value} ==> {CA PAM Action based on AWS tag Value}

What AWS tags do we have in connection with CA PAM?

Environment

Release: 3.x
Component:

Resolution

There are two AWS tags we can utilize for AWS instances.

1. PAMIgnore  ( formerly XsuiteIgnore )

PAM will not import instances with tag of "PAMIgnore"

 

on AWS side, add tag on the instance

   Key = PAMIgnore

   Value = <any value>

 

2. PamGroups ( formerly XsuiteGroups)

You can use AWS tag "PamGroups" with PAM device group to make it easier for you to create policies for the devices you may specifically use.

<How to>

on PAM side
Device group -> AWS in "provision type" and enter group name to create AWS device group

on AWS side, add tag on the instance

   Key = PamGroups

   Value = Group1,Group2,Group3

Note: There is no specific limit set for the number of groups.

Additional Information

Using AWS Tags