Stop Giving Permanent Access To Anyone: Just-in-Time with Apono

Granting permanent access to anyone for anything is dangerous and unnecessary. Instead, we should be using the just-in-time approach, and Apono might be just the solution for that. Enhance security, prevent breaches, and empower us to control access more effectively while easily giving temporary access to whoever needs it with Apono.
#Kubernetes #Cybersecurity #AccessManagement
Consider joining the channel: / devopstoolkit
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬
➡ Gist with the commands: gist.github.co...
🔗 Apono: www.apono.io
▬▬▬▬▬▬ 💰 Sponsoships 💰 ▬▬▬▬▬▬
If you are interested in sponsoring this channel, please use calendar.app.g... to book a timeslot that suits you, and we'll go over the details. Or feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬
➡ Twitter: / vfarcic
➡ LinkedIn: / viktorfarcic
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬
🎤 Podcast: www.devopspara...
💬 Live streams: / devopsparadox
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬
00:00 Introduction to Just-in-Time Access
02:32 Create Access Flows With Apono
11:19 Grant Access With Apono
16:40 Revoke Access With Apono
17:50 Other Apono Features and Pricing
20:45 Apono Pros And Cons

[@olegts1674]

Em, no prices on the main page - even don't want to give a try. Btw - thank you for the review!

[@Babbili]

😂😂 perfect answer for anyone asking access to kubernetes

[@Babbili]

I'll try to do that with RBAC

[@mrgdevops]

felt sad for the kid :( ...just like that enthusiastic intern

[@noresize]

The pricing page is available now btw.
Really great video! Thanks for your awesome work.

[@thescourgeofathousan]

Recommend to make sure you understand why access was necessary and enhance your non-access-based information gathering and presentation (viability) system to make sure it is not required in future incidences of this issue as a matter of top priority.

[@user-fy5jk4nc4w]

Respect and reverence (in Russian uvazuha) to you for this informative video!

[@RafaelDurelli]

Nice video as always

[@Elrevisor2k]

Nice the full video 😃

[@betorvs]

​ @DevOpsToolkit is there any limitation inside Apono UI for this free access? Like limited number of clusters that can be integrated, or any integration that is not free and you need to contact them. Do you notice anything? Great video. Thanks!

[@DevOpsToolkit]

i haven't noticed any limitations. There must be something though since there is or will be a commercial version of it.

[@dirien]

two version of Viktor would awesome!

[@DevOpsToolkit]

We'd eventually kill each other.

[@shaikzoheb3430]

Nice one victor
You are coming up with really nice and cool products
You are magician

[@TechTurbid]

but is it free/freemium? I couldnt find a pricing page for this. I would love to find an open source application that does exactly that

[@bubi352]

heavily doubt it. its always shady if there is no pricing on the page and a "try for free" is available. try and search for goteleport

[@DevOpsToolkit]

I also could not find pricing so I'm not sure.

[@DevOpsToolkit]

How do you deal with access? Is it "no one gets it" or "everyone is a permanent admin" or something in between?

[@XRoydX]

Staging cluster full access for everyone. Production limited to a role arn with full access time scoped, rest handled as you've described. Argo, newrelic, pixie and so on.

[@memo.i.garcia]

Sadly this is not a on-prem tool :(

[@AndreiDobre-vj4bz]

Ngl I felt bad about the kid, I would have given the key.

[@simo47768]

Haha. Funny video

[@schwerkopf]

first :D