r/CyberARk

My friend tried to draw the cyber ark self hosted architecture, but he was unsure regarding it's correctness and whenever he asks someone who knows the subject, they just say it's about the perspective.

Can anyone rectify the mistakes?

Hi All,

We have a CyberArk SaaS setup where users access CyberArk/IDIRA through AWS AppStream. AppStream provides options such as catalogs, file explorers, fullscreen, etc. Users launch Edge or Chrome from the Catalogs and access the CyberArk portal.

The issue occurs when a user connects to a target machine through PSM and then clicks the Fullscreen option in the AppStream toolbar. The PSM session does not expand to fill the entire screen; instead, it gets cut off at the end, leaving a blank area. Additionally, when exiting fullscreen or minimizing the session, the taskbar does not reappear.

This issue does not occur when users take a direct RDP session from AppStream—the session expands correctly and works as expected.

The Cloud team has confirmed that the issue appears to be related to the PSM configuration. Has anyone experienced a similar issue? Are there any PSM settings or connection component configurations that should be checked or enabled to support proper fullscreen behavior within AWS AppStream?

Any suggestions would be appreciated.

The short answer is no.

This is a misconception I come across quite often.

Don't get me wrong. PAM (Privileged Access Management) and IAM (Identity & Access Management) are both essential components of a modern cybersecurity strategy. They play a critical role in controlling who can access your systems, what they can access, and what permissions they have.

However, they are not designed to solve every security problem.

For example, neither PAM nor IAM is specifically built to stop:

• Sophisticated bot attacks
• Credential stuffing
• Account takeover attempts
• Fake account creation
• Web scraping
• Automated abuse of APIs
• DDoS attacks
• Endpoint compromise
• Insider threats
• Malware and ransomware
• Data exfiltration

Each of these threats requires different security controls.

That's why mature security programs don't rely on a single product. They build layers of protection.

A typical enterprise security architecture might include:

• IAM for identity and authentication
• PAM for privileged accounts
• WAF for web application protection
• Bot Mitigation for automated threats
• EDR/XDR for endpoint protection
• SIEM for monitoring and threat detection
• DLP for protecting sensitive data

Every technology has a purpose.

Expecting one solution to protect every layer of your organisation is like expecting the front door lock to secure an entire building.

Cybersecurity isn't about buying the "best" product.

It's about understanding your risks, selecting the right technologies for each layer, and making them work together.

What security layer do you think organisations most commonly overlook today?