[{"data":1,"prerenderedAt":79},["ShallowReactive",2],{"term-j\u002Fjust-in-time-access":3,"related-j\u002Fjust-in-time-access":60},{"id":4,"title":5,"acronym":6,"body":7,"category":40,"description":41,"difficulty":42,"extension":43,"letter":44,"meta":45,"navigation":46,"path":47,"related":48,"seo":54,"sitemap":55,"stem":58,"subcategory":6,"__hash__":59},"terms\u002Fterms\u002Fj\u002Fjust-in-time-access.md","Just-in-Time Access",null,{"type":8,"value":9,"toc":33},"minimark",[10,15,19,23,26,30],[11,12,14],"h2",{"id":13},"eli5-the-vibe-check","ELI5 - The Vibe Check",[16,17,18],"p",{},"Just-in-time access means nobody walks around with permanent admin keys in their pocket all day, every day. Instead, you request access right when you need it, get it approved, use it for an hour, and then it evaporates on its own. It's the difference between everyone on staff carrying a master key forever versus asking the front desk to buzz you into one room for twenty minutes.",[11,20,22],{"id":21},"real-talk","Real Talk",[16,24,25],{},"Just-in-time access grants elevated or sensitive permissions only for a limited window and a specific task, typically through an approval workflow, rather than as a standing, always-on privilege. It shrinks the attack surface of privileged accounts by minimizing how long credentials remain valid and exploitable.",[11,27,29],{"id":28},"when-youll-hear-this","When You'll Hear This",[16,31,32],{},"\"Prod database access is JIT now, you request it and it expires in 60 minutes.\" \u002F \"We replaced standing admin roles with just-in-time access requests through the access broker.\"",{"title":34,"searchDepth":35,"depth":35,"links":36},"",2,[37,38,39],{"id":13,"depth":35,"text":14},{"id":21,"depth":35,"text":22},{"id":28,"depth":35,"text":29},"security","Just-in-time access means nobody walks around with permanent admin keys in their pocket all day, every day.","intermediate","md","j",{},true,"\u002Fterms\u002Fj\u002Fjust-in-time-access",[49,50,51,52,53],"Principle of Least Privilege","Zero Trust","IAM","Credential Rotation","Service Account",{"title":5,"description":41},{"changefreq":56,"priority":57},"weekly",0.7,"terms\u002Fj\u002Fjust-in-time-access","6si_wv83wgRS2ZKMVX4OTTlN6FvTcmvLJ2MImddgQUw",[61,64,69,73,76],{"title":52,"path":62,"acronym":6,"category":40,"difficulty":42,"description":63},"\u002Fterms\u002Fc\u002Fcredential-rotation","Credential Rotation is the practice of regularly changing ALL your secrets — database passwords, API keys, certificates, tokens.",{"title":51,"path":65,"acronym":66,"category":67,"difficulty":42,"description":68},"\u002Fterms\u002Fi\u002Fiam","Identity and Access Management","cloud","IAM is the permission system for AWS. It controls who (users, roles, services) can do what (read S3, start EC2, invoke Lambda) on which resources.",{"title":49,"path":70,"acronym":6,"category":40,"difficulty":71,"description":72},"\u002Fterms\u002Fp\u002Fprinciple-of-least-privilege","beginner","Principle of Least Privilege means everyone and everything gets only the MINIMUM access needed to do their job. The intern doesn't get admin access.",{"title":53,"path":74,"acronym":6,"category":67,"difficulty":42,"description":75},"\u002Fterms\u002Fs\u002Fservice-account","A service account is a special non-human account that your app or service uses to authenticate with cloud APIs.",{"title":50,"path":77,"acronym":6,"category":40,"difficulty":42,"description":78},"\u002Fterms\u002Fz\u002Fzero-trust","Zero trust means 'never trust, always verify' — even if a request comes from inside your network.",1792528094350]