Supplement your AWS security with JIT access and CNAPP
summary
Ermetic presents a CNAPP feature that enforces just-in-time access via AWS IAM Identity Center, granting temporary elevated roles for fixed durations in hours, revoking them automatically or on-demand, and notifying approvers through Slack for one‑click approve/deny. Demo shows eligibility setup, a Slack request/approval flow that creates an AWS session, immediate revocation, and searchable, processed session activity (CloudTrail-derived) that highlights actions like S3 full access for post‑incident audit, reducing blast radius and accidental standing privileges.
AI-written summary · about
chapters (8)
- 0:00Introduction to Ermetic
- 1:17Service versus human identities
- 3:01The risk of human access
- 5:00Just-in-time access solution
- 7:12Just-in-time access demonstration
- 10:30Integration with Slack
- 11:45Auditing and session monitoring
- 13:18Security impact and conclusion
related talks
13mJIT privileged access management for cloud infrastructure (PRT015)
12mHow PicPay achieved temporary elevated access control on AWS
28mYour journey to temporary credentials in the cloud
44mAchieve your identity, security, and compliance goals on
59mProvably secure authorization
26mThe Power of AWS Tags (Advanced IAM Session)
55mUsers and their data: Modern access and audit patterns on AWS
35mAccount Jumping Post Infection Persistency & Lateral Movement in AWS