The user fetches the AWS token from the Privileged Access Manager to log into the AWS workspace to access the dynamic secret for a specific resource delegated by the Administrator. Follow the procedure to configure.
On the home page of Privileged Access Manager, click Credential Vault
Click Add +
Select Cloud > Amazon Web Services
In the General page, add the Domain name as AWS Resource
In the Connection Details page, add the following:
Sign-In URL for IAM users
Region
Password Policy
Vault Host: AWS IP
Vault Region: Example, Mumbai
In the Password Management page, select the Reconcile Account Credential.
Optionally add the extended attributes and the Reconcile Credential.
In Template page add the credential required for dynamic secret configuration.
Checkbox or UI string with the following information: account": "aws-user5", "type": "dyn_ephemeral", "privilege_type": "shift-leader", "ttl": 30
The Administrator assigns delegated policies using Access control.
Log into Privileged Access Manager.
Click on My Access.
Retrieve username and password.
This secret is used to log into the AWS console and access a specific resource along with details such as AWS account Active, password Age, and Active key information.