CyberArk-Ansible end to end demo - 1: Secure Privilege Access (static servers)

[ The Story ]
The company is going to launch a new website.
An operator needs to update the DNS records so that the users will be redirected to a nice under-construction website.
In order to provide centralized management & logging in Ansible Tower, this operator is allowed to update playbooks and can only execute them via Ansible Tower (i.e. cannot run the playbook directly using command line interface)
CyberArk is used to secure the whole progress.

[ Use Case 1- Secure Privilege Access (static servers) ]
1. User authenticates to PVWA
2. OS credentials (passwords & SSH) are securely stored in Vault server
3. EPV / SSHKM automatically rotates the credentials
4. User access the target machines via PSM without knowing the credentials 5. PSM/OPM can enforce command-filtering