Our organization is moving to managed accounts for accounts that have administrative permissions. This would include our admin accounts for our AWS RDS SQL Server instances. Ideally, the accounts would be managed by Cyberark, synced with AWS Secrets manager, and passwords would be automatically changed in the RDS instance after use.
SQL Sentry requires the use of the admin account for monitoring the RDS instance. Therefore, if we implement a rolling password, the connections to the monitored targets would have an incorrect password every time we needed to 'check out' the admin password (which is fairly often).
What I need is the ability to automatically update the connection information in targets when the admin account changes, either through some sort of scripting/api, or an interface from SQL Sentry to AWS Secrets Manager / Cyberark Secrets Hub. And it would nice if it could be implemented in such a way that it could be used not just by AWS/RDS.
The bottom line is that this functionality is going to be required soon. I'm just hoping I can get it sooner rather than later.
