The CyberArk RestAPI

Greetings all,

I’ve written a DLL to query CyberArk so I can pull that data into a SQL Server database.

Being a firm believer in code reuse, this DLL is a generic DLL for querying pretty much any CyberArk deployment. Just call clsCyberArk.Token(“https://vault.address/passwordvault”,”username”,”password”.”authType”) to return a token. For all other functions, pass the parameters for the call including the retrieved token.

The user name and password must be in clear text due to a limitation of the RestAPI. However, if the account is a vault admin or other high privileged account in CyberArk, you really should be rotating that password on a very short and regular basis. I’d also recommend pulling the credentials from CyberArk using the AAM client.

You can find the source code for this DLL on my public Git repository

As time permits, I’ll get the code fully documented but for now, if you can’t figure it out, just let me know and I’ll explain.