Secure just-in-time access to Tailscale-protected infrastructure using GitHub Actions. Leverage GitHub's built-in security, approvals, and audit trails for temporary, auditable network access.

Auditable .env secret manager featuring aggressive CLI safeguards and GitHub JIT access.

A curated collection of IAM and PAM resources, insights, best practices, and implementation guidance based on my hands-on experience.

Reference architecture for a Privileged Access Management system — Zero Trust, JIT SSH access, encrypted vault, session recording. HLD docs, ADRs, and working Node.js implementation with 66 tests.

High-Level Design for a Just-in-Time Privileged Access feature in a PAM system

Broker patterns for JIT access across Azure and AWS.

Just-in-time privileged access elevation for cloud infrastructure

CLI and flows for temporary AWS access the JIT way.

⏱️ Microsoft Entra PIM + AWS JIT Access — Just-In-Time privileged access from Azure AD to AWS with Terraform

JIT Ephemeral Access Broker in Go — zero-trust just-in-time privileged access with PagerDuty/Jira validation, HashiCorp Vault token brokering, and automatic 60-min self-destructing credentials. DevSecOps, PAM, ephemeral access.