Windows Domain Servers

Manage RDP access to the Windows servers of an Active Directory domain. Access is granted by changing Active Directory group membership over LDAP, so the connector only needs to reach a domain control

Example Usage

---

Terraform

windows-domain-integration.tf

resource "apono_integration" "windows-domain-integration" {
  name                     = "Windows Domain Servers"
  type                     = "windows-domain"
  connector_id             = "apono-connector-id"
  connected_resource_types = ["windows-domain-server"]
  metadata = {
    url = "<LDAP Server URL>"
    rdp_port = "<RDP Port>"
    computers_scope = "<Computers Scope>"
    groups_scope = "<Groups Scope>"
    user_email_attribute = "<User Email Attribute>"
    custom_ca_cert = "<Self-signed server or CA certificate>"
    enable_session_audit = "<Audit sessions>"
  }
  kubernetes_secret = {
    name      = "name_template_value"
    namespace = "namespace_template_value"
  }
}

Terraform V2

windows-domain-integration.tf

resource "apono_resource_integration" "windows-domain-integration" {
  name                     = "Windows Domain Servers"
  type                     = "windows-domain"
  connector_id             = "apono-connector-id"
  connected_resource_types = ["windows-domain-server"]
  integration_config = {
    url = "<LDAP Server URL>"
    rdp_port = "<RDP Port>"
    computers_scope = "<Computers Scope>"
    groups_scope = "<Groups Scope>"
    user_email_attribute = "<User Email Attribute>"
    custom_ca_cert = "<Self-signed server or CA certificate>"
    enable_session_audit = "<Audit sessions>"
  }
  secret_store_config = {
    kubernetes = {
      name      = "name_template_value"
      namespace = "namespace_template_value"
    }
}

Public API

windows-domain-integration.json

{
    "windows-domain-integration": {
        "name": "Windows Domain Servers",
        "type": "windows-domain",
        "connector_id": "apono-connector-id",
        "connected_resource_types": [
            "windows-domain-server"
        ],
        "integration_config": {
            "url": "<LDAP Server URL>",
            "rdp_port": "<RDP Port>",
            "computers_scope": "<Computers Scope>",
            "groups_scope": "<Groups Scope>",
            "user_email_attribute": "<User Email Attribute>",
            "custom_ca_cert": "<Self-signed server or CA certificate>",
            "enable_session_audit": "<Audit sessions>",
        },
	"secret_store_config": {
    	    "name": "name_template_value",
    	    "namespace": "namespace_template_value"
  	    }
    }
}

Schema

---

• type windows-domain

• connected_resource_types List of resource types to sync.

Available resource types you can use

• windows-domain-server

Integration Config

---

• url (Required | String) LDAP Server URL

• rdp_port (Optional | String) RDP Port

  • Default value: 3389

• computers_scope (Required | String) Computers Scope

• groups_scope (Optional | String) Groups Scope

• user_email_attribute (Optional | String) User Email Attribute

  • Default value: mail

• custom_ca_cert (Optional | String) Self-signed server or CA certificate

• enable_session_audit (Optional | String) Audit sessions

  • Default value: false

  • Possible values: true, false