Secure Your Public Cloud with Just-in-Time (JIT) Access

Highly-privileged access to sensitive cloud environments is one of the biggest security challenges organizations face today – and one that can quickly become a security and compliance nightmare. Engineering teams are sometimes granted “always on” access when, in reality, they only need brief, intermittent access to get the job done.

Find out how Ermetic Just-in-Time (JIT) helps your developers get speedy approval for as-needed access that helps minimize your cloud attack surface and avoid the risk caused by unrevoked long-standing privileges.

A Clear and Present Access Attack Surface

Gartner recently advised security leaders to implement “a process for quick and easy requesting and granting of additional privileges with minimal disruption to an individual’s workflow.” This capability is often referred to as “Just-in-Time” (JIT) privileges, or “Just-in-Time” (JIT) access. Ermetic’s industry-leading CIEM capabilities, which deliver full visibility into permissions in multicloud environments, enables organizations to provide the right users the right access to the right resources at the right time and for the right reasons. The Ermetic JIT self-service workflow enables easy requesting and granting of approvals with minimal disruption.

Fast Approvals with Self-service Workflows

Minimize the risk of attackers exploiting excessive privileges by granting access for the smallest period of time needed for the user to complete the task. The Ermetic JIT portal drives self-service workflows to empower engineering teams to easily request access and gain authorized access to required resources. Ermetic’s JIT capability, with highly granular entitlement management, provides secure privileged access in the cloud that allows you to:

  • Save engineering teams time by enabling them to quickly submit a request, notify approvers and gain temporary access
  • Simplify operations by automating access request and consent functions
access-requests-upd jul17
access-requests-upd jul17

Automated Access Control

Engineering teams need powerful privileges and entitlements to stand up and manage cloud infrastructures. However, such access should only be granted in Just-in-Time fashion – for a limited time, and right-sized to avoid excessive permissions. Ermetic helps achieve and maintain “zero standing privileges” by providing authorized access for a predefined period of time, after which it automatically terminates access and revokes permissions.

  • Minimize your cloud attack surface by enforcing fine-grained least privilege policies and avoiding use of long-standing privileges
  • Flexibly grant access to sensitive cloud environments via the AWS console or a dedicated API

Continuous Audit and Governance

Maintain an audit trail and investigate access activity, including who accessed what and when, who elevated which permissions and when, what the justification was and who the approver was. Ermetic’s JIT provides audit trail information about JIT-related activity in a dedicated view. Using built-in reports, your teams can communicate with stakeholders on internal compliance, external audits and daily security activities including user activity during elevated sessions, past requests and the underlying authorization process.

  • Monitor user activity during elevated sessions and generate reports for all JIT access requests and authorizations
  • Improve compliance, and threat detection and subsequent remediation, with real-time session monitoring

Learn How AppsFlyer is Remediating Risk Using Ermetic

With Ermetic, we immediately saw the risks to our environment and could quickly remediate them. No other solution provided this type of deep visibility into access entitlements and publicly accessible resources.”

Read the Case Study

Hear from Our Customers

Read Case Studies
Dominic Zanardi Security Engineer, Latch

If we didn’t have Ermetic analyzing roles, policies and network configuration, that would easily be an additional three to four analysts. It’s saving us hours and head count.

David Christensen Senior Information Security Executive

This is one of the few platforms I’ve brought into the cloud that has had actionable efforts in under 30 days. From a return on investment perspective, it was one of the best decisions we made.

Eugene Gorelik VP Engineering at Airslate

Ermetic has allowed us to concentrate on our business rather than on concentrate just on the cloud security.

Larry Viviano Director of Information Security, IntelyCare

If I didn’t have Ermetic to manage my cloud security, I probably would need an additional two or three headcount in order to do that manually.

IntelyCare x Ermetic