JITAccess

JITAccess is a web app (with optional CLI) that enforces time-bound, approval-based access to cloud resources across AWS, Azure, and GCP. Instead of handing out long-lived IAM roles and hoping people clean up, it issues short-lived permissions tied to a ticket, reason, and expiration, then auto-revokes and logs everything. It integrates with existing identity providers (Okta/Azure AD), GitHub, and common ticketing tools to reduce friction for engineers while giving security teams clear audit trails. The MVP focuses on one cloud first (AWS) and a narrow set of high-risk actions (prod console access, IAM changes, key management, and data exports). This is not magic: it won’t stop every breach, and it requires buy-in to change workflows. But it directly reduces the blast radius of compromised credentials and over-permissioned users.