6.2 Just In Time Access Framework

This section outlines the procedure needed to enable just-in-time (JIT) access for Amazon Web Services, and Public Key Infrastructure.

Organizations can grant enhanced privileged access to an application or system in real-time to both human and non-human users in order to carry out a necessary task by using the just-in-time (JIT) access approach. JIT access enables businesses to supply access so that users can only access privileged accounts and resources when they are actually needed. Organizations can employ JIT access to restrict access to a particular resource for a defined amount of time rather than allowing always-on (or standing) access (or standing access). By drastically lowering the time it takes a hacker or malicious insider to get access to privileged accounts before moving laterally through a system and acquiring unauthorized access to critical data, this granular method reduces the risk of privileged account abuse. The dangers of standing privileges are reduced by just-in-time access.

The following explains the difference between emergency access and Just-in-Time access:

Emergency Access Requests

When a user requires access to a privileged session, database server, or to application server but does not have rules defined, then they can request emergency access.

Just-in-Time Access

Also known as JIT, is an essential cybersecurity process where users, applications, or systems are granted privileged access, only for a limited period of time on an as-needed basis. The user need not even have an existing account or access to a specific target.