Secure Cloud Access is a CyberArk Identity Security Platform service that provisions access Just-in-Time with zero standing privileges to cloud management consoles and services running in AWS, Azure and GCP environments. CyberArk Secure Cloud Access elevates access just-in-time to roles scoped with just enough permissions to adhere to the principle of least privilege and meet the risk reduction benefits of having zero standing privileges.

By elevating access just-in-time, the service enables technical teams with the permissions to do their job while reducing the risks of credential theft and excessive access. Secure Cloud Access allows users to launch sessions that are protected and monitored natively removing the need to go through a jump server. This enables seamless access while reducing risk and keeping visibility of end user behavior to satisfy audit. In the event of a critical situation, Engineers can request On-Demand elevation of access, enabling them to securely request and rapidly receive the elevated entitlements needed to save the day.

CyberArk Secure Cloud Access provides extensive controls to secure native access to every layer of a cloud environment-from cloud-native services to dynamic workloads running on the cloud to lift-and-shift workloads and SaaS applications. CyberArk Secure Cloud Access provides Just-in-time (JIT) access with Zero Standing Privileges. The solution analyzes cloud entitlements and offers an Insight to Action framework to accelerate risk reduction and time to value through migration to safer access policies-all with integrations into operations tooling for great developer and user experiences.

The solution provides native user experience as an end-user can work with the native tools they are used to (SSH client, web browser, future - DB client) while CyberArk secures the identity, the access, and the session. The solution also copes with the dynamic nature of the cloud by providing real-time discovery of VMs and cloud roles, to reduce the need to keep changing access policies or on-board new targets.

IT and development teams can also elevate access to workloads just-in-time using attribute-based access control (ABAC).

CyberArk Secure Cloud Access provides temporary elevated access management and has full integration with both AWS IAM Identity Center and AWS IAM. Access workflows can be integrated with common ChatOps Tools like Slack or ITSM Platforms such as ServiceNow. These integrations drive operational efficiency.

For custom pricing, EULA, or a private contract, please contact AWS-Marketplace@cyberark.com , for a private offer.