JIT privileged access management for cloud infrastructure (PRT015)
summary
Ermetic’s Just In Time access creates temporary AWS permissions managed through IAM Identity Center with configurable eligibilities that let users request roles for fixed durations (examples shown: one hour and a six‑hour max). Requests follow an approval workflow, integrate with Slack/PagerDuty so approvers see on‑call status, and Ermetic captures and surfaces CloudTrail session logs for each granted session so auditors can verify exactly which API calls occurred during that window.
AI-written summary · about
chapters (7)
- 0:00Introduction to JIT access
- 1:47Risks of permanent human access
- 3:13Just In Time Access feature
- 5:25How JIT access works
- 6:30Demo in Ermetic console
- 9:21Third-party integrations demo
- 11:35Benefits and summary
related talks
15mSupplement your AWS security with JIT access and CNAPP
17mManage temporary elevated access with AWS IAM Identity Center
12mHow PicPay achieved temporary elevated access control on AWS
28mYour journey to temporary credentials in the cloud
34mScaling access with AWS IAM Identity Center, feat.
24mEnhancing Compliance and Safety with Argo CD Ephemeral Access
55mUsers and their data: Modern access and audit patterns on AWS
07mThe Power of Just-In-Time