---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure AWS credentials on a CyberArk vault

# Configure AWS credentials on a CyberArk vault {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Configure your CyberArk vault with the AWS credentials to be retrieved for use by
your instance.

## Before you begin

Role required: admin

## About this task

Store the credentials as an Account on the CyberArk vault. When you configure access to the vault on your instance, the name you give to the Account must also be used as the credential ID.  
Note:  
The procedure that follows references CyberArk Password Vault v14.2.1. If you are using a different version, set up configuration as per official CyberArk Password Vault documentation.

## Procedure

1. In CyberArk, go to AccountsAccounts \& RequestsAccounts ViewAdd Account.
2. Select system type: Cloud Service.
3. Assign to platform: Amazon Web Services - AWS - Access Keys.
4. Store in Safe: Select a safe from the list.
5. Define properties: Enter the following information:  
   {#create-cred-AWS__table_egm_cbw_g2c__entry__2}

   | Field | Value |
   |-|-|
   | AWS IAM Username | Enter the AWS Access Key, as provided by AWS. |
   | AWS Access Key Secret (optional) | Enter the AWS Secret Access Key, as provided by AWS. |
   | Customize account name | Toggle slider to enter a custom name for this key. |
   | AWS Access Key ID | Enter the AWS Access Key again, as provided by AWS. |
   | AWS Account ID Number | Enter the 12-digit AWS Account number. |
   | AWS Account Alias Name (optional) | Enter an alias name for the account. |
   [Table 1. CyberArk credentials]

   {#create-cred-AWS__table_egm_cbw_g2c}
6. Choose Add.

## What to do next

If you have not done so already, create a credential identifier on your instance to
configure access to the CyberArk vault. For more details, see [Configure access to
external credential storage for AWS](https://www.servicenow.com/docs/5h7y3qg7cSmQbYLfZdahQA#config-cred-identifier-AWS "Configure your instance to obtain credentials from a remote repository.").

## Configure AWS Credentials on a CyberArk Vault using Classic UI {#ariaid-title2}

Configure your CyberArk vault with the AWS credentials to be retrieved for use by your instance.

### Before you begin

Role required: admin

### About this task

CyberArk Password Vault v14.2.1 includes both Accounts View and Accounts View (Classic UI) configuration options to store the credentials as an Account. When you configure access to the vault on your instance, the name you
give to the Account must also be used as the credential ID.  
Note:  
The procedure that follows references CyberArk Password Vault v14.2.1. If you are using a different version, set up configuration as per official CyberArk Password Vault documentation.

### Procedure

1. In CyberArk, go to AccountsAccounts \& RequestsAccounts View (Classic UI)Add Account.
2. Enter the following information:  
   {#create-cred-AWS-classic__table_jtq_wly_pv__entry__2}

   | Field | Value |
   |-|-|
   | Device Type | Select Cloud Service. |
   | Platform Name | Select Amazon Web Services - AWS - Access Keys. |
   | AWS IAM Username | Enter the AWS Access Key, as provided by AWS. |
   | AWS Access Key ID | Enter the AWS Access Key again, as provided by AWS. |
   | AWS Account ID Number | Enter the 12-digit AWS Account number. |
   | AWS Access Key Secret | Enter the AWS Secret Access Key again, as provided by AWS. |
   | Name | Enter a custom name for this key. |
   [Table 2. CyberArk credentials]

   {#create-cred-AWS-classic__table_jtq_wly_pv}
3. Choose Save.

### What to do next

If you have not done so already, create a credential identifier on your instance to configure access to the CyberArk vault. For more details, see [Configure access to external credential storage for AWS](https://www.servicenow.com/docs/5h7y3qg7cSmQbYLfZdahQA#config-cred-identifier-AWS "Configure your instance to obtain credentials from a remote repository.").

*[\>]: and then