Secure just-in-time access to Tailscale-protected infrastructure using GitHub Actions. Leverage GitHub's built-in security, approvals, and audit trails for temporary, auditable network access.

Auditable .env secret manager featuring aggressive CLI safeguards and GitHub JIT access.

A curated collection of IAM and PAM resources, insights, best practices, and implementation guidance based on my hands-on experience.

Reference architecture for a Privileged Access Management system — Zero Trust, JIT SSH access, encrypted vault, session recording. HLD docs, ADRs, and working Node.js implementation with 66 tests.

High-Level Design for a Just-in-Time Privileged Access feature in a PAM system

⏱️ Microsoft Entra PIM + AWS JIT Access — Just-In-Time privileged access from Azure AD to AWS with Terraform

Just-in-time privileged access elevation for cloud infrastructure

Broker patterns for JIT access across Azure and AWS.

CLI and flows for temporary AWS access the JIT way.

JIT Ephemeral Access Broker in Go — zero-trust just-in-time privileged access with PagerDuty/Jira validation, HashiCorp Vault token brokering, and automatic 60-min self-destructing credentials. DevSecOps, PAM, ephemeral access.