Before you begin

• You will need an AWS account.
• Your AWS access ID.
• Your AWS secret access key
• You will need at least one active VSatellite to provision certificates to AWS.
• CyberArk permissions for AWS IAM - you must attach the relevant IAM policies in the following JSON file to the Next-Gen Trust Security AWS Integration IAM Role in your AWS account:

  {
  "Version":"2012-10-17",
  "Statement":[
      {
          "Effect":"Allow",
          "Action":[
              "acm:ListCertificates",
              "acm:GetCertificate",
              "acm:RequestCertificate"
          ],
          "Resource":"*"
      }
  ]
  }

  For more information, refer to Configure AWS Connection

1. Sign in to Next-Gen Trust Security.
2. Click Configuration > Certificate Authorities.
3. Click New > AWS.
4. Select a VSatellite.
5. Select a certificate authority type.
6. Click Next.
7. Select a region.
8. Enter your AWS access ID.
9. Enter your AWS secret access key.
   Note: The AWS access ID and AWS secret access key authenticate and authorize requests to AWS. These credentials uniquely identify the AWS user or role and verify their permissions to perform actions through the AWS API. They're essential for secure communication and automation between CyberArk and AWS.
10. Click Test Access, then click Next.
11. (Optional) In Product Options, select the certificate authority products to map to certificate issuing templates (CITs).
12. (Optional) Click Add.
13. Click Create.