Cloud integration using Azure Key Vault - For Cloud integrations, you can configure the Control Room and external key vault integration using the Automation 360 Control Room user interface.

Automation 360

For Cloud integrations, you can configure the Control Room and external key vault integration using the Automation 360 Control Room user interface.

The Agent auto-login and Agent automation use cases are only supported on Automation 360 Cloud Control Room instances. Neither of these use cases affect the Control Room boot sequence or Control Room functionality.

Note: Bootstrap and service account credential retrieval use cases are not supported on Cloud Control Room instances because the database and services are managed internally by Automation Anywhere. There is no compliance use case (requirement) for these credentials to be stored in the customer external key vault.

Prerequisites

  • Gather the specific Azure information required to configure the external key vault connector using the Automation 360 Control Room.
    Item Description
    Vault URL The Azure Key Vault URL of the resource group (for example: https://user-db-vault.vault.azure.net/).
    Client ID The client (application) ID of an App Registration in the tenant.
    Client Secret A client secret that was generated for the App Registration.
    Tenant ID The Azure Active Directory tenant (directory) ID.
  • Add your regional outbound Cloud IP addresses to the trusted or allowed list in your Azure Key Vault network settings. See Control Room IP address list for external integrations.
  • Create OAuth connection if you're integrating Control Room with Azure Key Vault using API gateway. See Create OAuth connection.
  • Ensure that you understand the key vault naming convention requirements before you integrate the Azure key vault. See External key vault naming conventions.

Procedure

Note: In Automation 360 v.41 and later, external vault configuration is available through only one of the following paths, depending on the features enabled for your environment:
  • If the Manage > External Vault option is visible, configure external vault using this flow. This flow supports configuring external vault connection in environments that use one or more external vaults.
  • If not, configure external vault using Administration > Settings > External key vault.
  1. Log in to the Automation 360 Control Room with the required permissions.
  2. Do one of the following based on the navigation path visible to you:
    • Navigate to Administration > Settings > External key vault and click the Edit icon.

      Administration path

    • Navigate to Manage > External Vault > Vaults and click the Add Vault, Add or + icon.

      Manage path

    .
  3. Click Azure and then enter the specific Azure information described in the preceding table.
    Note: If you're integrating Control Room with Azure Key Vault using API gateway, do the following:
    • Provide the API gateway endpoint vault URL for Vault URL.
    • Select Enable Authorization (API Gateway) to enable authorization while connecting to Azure Key Vault.

      API gateway setup

    • Select the configured API gateway endpoint from the OAuth connection drop-down list.
    • Enter the Http header name. The default HTTP header name is Authorization. If your API gateway is configured with a different header name, specify that.
  4. Click Save changes or Add Vault to connect the external key vault.
Next steps