Messaging and Queuing Connection Profiles

The following topics describe the connection profile parameters for Messaging and queuing platforms and services:

AWS SNS Connection Profile Parameters
AWS SQS Connection Profile Parameters
Azure Service Bus Connection Profile Parameters
RabbitMQ Connection Profile Parameters

AWS SNS Connection Profile Parameters

Before you can define a job, you must create a connection profile in the Configuration domain. A connection profile contains authorization credentials—such as the username, password, and other plug-in-specific parameters—and enables you to connect to the application server with only the connection profile name. To create a connection profile, see Creating a Centralized Connection Profile.

For more information about this plug-in, see Control-M for AWS SNS.

The following table describes AWS SNS connection profile parameters.

Parameter	Description
AWS SNS URL	Defines the AWS SNS authentication endpoint. https://sns.us-east-1.amazonaws.com
AWS Region	Determines the region where the AWS SNS jobs are located. us-east-1
Authentication	Determines one of the following authentication methods: AWS Key & Secret: Authenticates with an AWS access key and secret, which are used by services outside the AWS infrastructure. AWS IAM Role: Authenticates with an AWS IAM role from within the AWS infrastructure, which removes the need to provide additional credentials.
AWS Access Key	Defines the access key assigned to the account with the relevant permissions to the AWS service.
AWS Secret	Defines the secret access key assigned to the account with the relevant permissions to the AWS service.
AWS IAM Role	Defines the Identity and Access Management (IAM) role name for the AWS service connection.
Use External Vault	Determines whether to retrieve secret parameter values from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.
Connection Timeout	Determines the number of seconds to wait after Control-M initiates a connection request before a timeout occurs. Default: 30

AWS SQS Connection Profile Parameters

For more information about this plug-in, see Control-M for AWS SQS.

The following table describes AWS SQS connection profile parameters.

Parameter	Description
AWS SQS URL	Defines the AWS SQS authentication endpoint. https://sqs.us-east-1.amazonaws.com
AWS Region	Determines the region where the AWS SQS jobs are located. us-east-1
Authentication	Determines one of the following authentication methods: AWS Key & Secret: Authenticates with an AWS access key and secret, which are used by services outside the AWS infrastructure. AWS IAM Role: Authenticates with an AWS IAM role from within the AWS infrastructure, which removes the need to provide additional credentials.
AWS Access Key	Defines the access key assigned to the account with the relevant permissions to the AWS service.
AWS Secret	Defines the secret access key assigned to the account with the relevant permissions to the AWS service.
AWS IAM Role	Defines the Identity and Access Management (IAM) role name for the AWS service connection.
Use External Vault	Determines whether to retrieve secret parameter values from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.
Connection Timeout	Determines the number of seconds to wait after Control-M initiates a connection request before a timeout occurs. Default: 30

Azure Service Bus Connection Profile Parameters

For more information about this plug-in, see Control-M for Azure Service Bus.

The following table describes Azure Service Bus connection profile parameters.

Parameter	Authentication Method	Description
Azure Login URL	Service Principal Managed Identity	Defines the base URL of the Microsoft Entra/Azure AD authentication endpoint. Default:https://login.microsoftonline.com
Subscription ID	Service Principal Managed Identity	Defines the Azure account ID of your organization.
Identity Type	Service Principal Managed Identity	Determines one of the following authentication methods: Service Principal: Access protected Azure services and resources based on roles assigned to the Service Principal by the Azure administrator. The Service Principal is also known as an App Registration. Use this method if the Control-M/Agent is installed on-premises or with another (non-Azure) cloud vendor. Managed Identity: Access protected Azure services and resources using a key created and managed by the Azure platform, without login credentials. Use this method if the Control-M/Agent is installed on an Azure virtual machine that has a Managed Identity with the required permissions.
Specify Managed Identity Client ID	Managed Identity	Determines whether the Managed Identity is specified by the Managed Identity Client ID parameter. Toggle on this option when you use the Managed Identity authentication method and your Azure virtual machine has multiple Managed Identities.
Managed Identity Client ID	Managed Identity	Defines the client ID of the Managed Identity that is used for access. If only one Managed Identity is defined on your Azure virtual machine, it is detected automatically, and you can leave this parameter empty.
Tenant ID	Service Principal	Defines the Azure tenant ID for your organization.
Resource Group	Service Principal Managed Identity	Defines the Azure Resource Group container that holds related service resources.
Application ID	Service Principal	Defines the Registered App for the Azure service in your Microsoft Entra/Azure AD tenant. The corresponding Service Principal must be assigned the Owner or Contributor role for the Azure service.
Client Secret	Service Principal	Defines the password associated with the Service Principal/registered application.
Use External Vault	Service Principal	Determines whether to retrieve secret parameter values from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.
Connection Timeout	Service Principal Managed Identity	Determines the number of seconds to wait after Control-M initiates a connection request before a timeout occurs. Default: 60

RabbitMQ Connection Profile Parameters

For more information about this plug-in, see Control-M for RabbitMQ.

The following table describes the RabbitMQ connection profile parameters.

Parameter	Description
RabbitMQ URL	Defines the URL of the RabbitMQ Server. http://dba-server.bmc.com
Port	Defines the port to access the RabbitMQ Server. Default: 15672
Username	Defines the username used to access the RabbitMQ Server.
Password	Defines the password used to access the RabbitMQ Server.
Use External Vault	Determines whether to retrieve secret parameter values from an external vault, as described in CyberArk Secret Parameters in Connection Profiles.
Connection Timeout	Determines the number of seconds to wait after Control-M initiates a connection request before a timeout occurs. Default: 50