Manage temporary elevated access with AWS IAM Identity Center
summary
An open‑source solution called TEAM integrates with AWS IAM Identity Center to grant time‑bound elevated access across multiple accounts, orchestrating Identity Center permission set assignment and automated removal when the window closes; it uses a React.js SPA front end and AWS serverless back end, supports preauthorized eligibility rules, approval or instant‑grant for incident teams, allows manual early revoke, and records per‑session activity searchable and exportable as CSV for auditors.
AI-written summary · about
chapters (9)
- 0:00Introduction to TEAM
- 1:05Cloud access challenges
- 4:22Solution overview
- 5:13Typical workflow scenario
- 7:33Developer requesting access
- 9:28Admin and approval process
- 11:47Using and revoking access
- 14:43Auditing activity logs
- 16:10Conclusion and resources
related talks
28mYour journey to temporary credentials in the cloud
13mJIT privileged access management for cloud infrastructure (PRT015)
12mHow PicPay achieved temporary elevated access control on AWS
23mGetting started with identity on AWS
01h 02mWhy IAM is the new perimeter, and how to govern it
01h 00mAWS Identity Workshop
25mGetting started with AWS Identity Services
31mIAM and why it is important in Cloud environments