just-in-time-access

Slack bot to temporary assign AWS SSO Permission set to a user

Vault/OpenBao Plugins for Just-In-Time, Privileged Access Management

Time limited, auto-expiring group memberships for users on Google Cloud

Serverless Just-In-Time (JIT) access broker for AWS. Features Slack ChatOps, policy-as-code, and automated zero-trust revocation.

Relay server and agent for kubernetes cluster interactions

Open-source database, API access & deployment governance platform A SQL, NoSQL, and API proxy that puts review, approval, and audit between your team and production data and services.

Just-in-time Microsoft Entra and Azure PIM activation from your menu bar/apptray: Entra directory roles, Azure resource roles and PIM for Groups across accounts and tenants, with profiles, shortcuts, approvals and expiry alerts.

Zero Standing Privilege Gateway for Azure - JIT access for AI agents, automation, and service principals

Self-service JIT access for AWS & Azure with Slack approval buttons, powered by Kestra

Kubernetes operator and kubectl plugin for Just-in-Time privilege escalation. Grant temporary, time-limited cluster access with automatic expiry, full audit trail via Kubernetes Events, and Prometheus metrics — no database, no external dependencies.

Zero Trust Access to Azure VM

Rust library for just-in-time sudo approvals and short-lived privilege elevation.

JIT Ephemeral Access Broker in Go — zero-trust just-in-time privileged access with PagerDuty/Jira validation, HashiCorp Vault token brokering, and automatic 60-min self-destructing credentials. DevSecOps, PAM, ephemeral access.

Maintenance access for Senzu: a named SSH account, closed by default, open only while a paid intervention is in progress.

Top Just In Time (JIT) Access Management 🌟 Star if you like it! 🌟

PRIMA - Privileged Role Identity Management Agent

Microsoft Entra PIM lab replacing permanent Global Administrator access with eligible, approved, time-bound activation and automatic expiry.

Argus Privilege Access Management (ArgusPAM) is an open-source web application for managing database credentials and access with a focus on security best practices.

Just-in-time privileged access elevation for cloud infrastructure

P0 Security — independent third-party profile of a public API surface, by API Evangelist. P0 Security is a cloud-native Privileged Access Management (PAM) platform that governs runtime authorization for human users, machine/service accounts, and AI agents across hybrid and multi-cloud environments.