3 ms·
It’s kind of terrifying to have and give out admin powers with no oversight (except maybe forensics if we’re lucky). I’m interested in what alternatives could l
by erik_seaberg 3y ago
It’s kind of terrifying to have and give out admin powers with no oversight (except maybe forensics if we’re lucky). I’m interested in what alternatives could look like. Maybe provisioning requests take multiple signatures, like turning missile keys?
- junto 3y agoWe use PIM in the Azure world. You can also use Azure PIM with AWS. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure https://learn.microsoft.com/en-us/entra/id-governance/privil...