Hi everyone, I'm still pretty new to PAM solutions, so I hope this question is okay. My team migrated from BeyondTrust to CyberArk about six months ago. We manage a lot of AWS infrastructure with Terraform, and I'm curious if others faced similar issues.
The biggest pain point for us was managing security groups and VPC configurations. In BeyondTrust, our jump host setup felt more integrated. With CyberArk, we had to write a lot more custom automation. For example, just to map a simple permission, we ended up with scripts that felt redundant. Has anyone else dealt with this? 😅
```hcl
# Example of the extra logic we needed for CyberArk integration
resource "aws_security_group_rule" "cyberark_jump" {
# ... extra vars and lookups needed
}
```
Also, the cost structure was less predictable for our cloud workloads. Any tips on keeping those under control after a switch like this?