Just-in-Time AWS Console Access with Delinea
See how Delinea gets an engineer into the AWS production console with no standing access, approved in Teams, and expiring on its own afterward.
Standing access to a production cloud console is hard to defend in an audit, so in this environment nobody has it.
Here’s what happens when an engineer needs it.
This is Delinea.
Right now there is no access to the AWS production console.
Same in the desktop app.
It’s not in the catalog, so there’s nothing to connect to.
Requests start where the engineer already works: in Teams.
They browse the catalog of what their role lets them ask for.
It is organized by team, so this one sits under SecOps.
A quick search finds it: AWS prod console. Continue, and the request goes out with the reason attached.
The approver sees who asked for what and why, and answers without leaving Teams.
Step-up authentication can sit here too, but we’ve skipped it to keep it short.
Now the resource appears, and the connection opens into the AWS production console that had no access a minute ago.
When the time window closes, the access disappears on its own.
No ticket to remove, and nothing left standing for an attacker to find.
Just-in-time access. delinea.com