Privileged Access Management solutions for Agile, multi-cloud and DevOps environments

Privileged Access Management (PAM) is an important area of risk management and security for any organization. Privileged accounts have traditionally been given to administrators to access critical data and applications. But changing business practices and upgrades to IT including cloud and other trends has meant that users of privileged accounts have become more numerous and widespread. An area in sharp focus is agile development teams such as DevOps and others that need secure access to privileged resources in the cloud; support for these has become essential to many organizations. Such teams need rapid access to privileged accounts, credentials and protected data, and PAM vendors are responding to this demand.

By Paul Fisher
pf@kuppingercole.com

October 22, 2020

Content of Figures

Figure 1 Transparent Security platforms including PAM must be embedded within the CI/CD lifecycle. A security feedback mechanism is also advisable to allow DevOps and other agile development teams to act quickly on vulnerabilities as they arise.
Figure 2 SSH.COM can process internal users and non-directory users with JIT certificate-based authorization and authentication. Certificates are issued for both types to access multiple servers. (Source: SSH.COM)

Commissioned by SSH.COM

1 Introduction

Today's organizations need to deliver new services and applications as they modernize operations and upgrade IT infrastructure. Unlike in previous gen ...

2 Highlights

Conventional PAM solutions for securing DevOps and other agile environments impede the process of collaboration, sharing and trust and hinder busine ...

3 DevOps challenges for PAM

Privileged Access Management solutions have evolved from platforms designed mostly to protect and manage privileged accounts traditionally accessed by ...

4 Finding the right PAM platform for agile teams using multi-cloud environments

The demands of agile teams are different from conventional IT environments and they are voracious users of privileged accounts to access high value di ...

5 Cloud-based challenges for agile teams using privileged access

Teams involved in agile projects of all kinds will also need access to resources and increasingly these are accessed to and from cloud and multi-cloud ...

6 SSH.COM PrivX for hybrid environments

SSH.COM is a security technology company based in Helsinki, Finland. It was founded in 1995 by Tatu Ylönen, the inventor of the Secure Shell protocol ...

While Just in Time and ephemeral access is ideal for DevOps end goal of rapidly deploying code and building applications, managers must ensure that co ...

7 Recommendations

Even if we lived in a world without cyber-attacks, the efficiency, and operational benefits that a well set up PAM solution delivers should be attract ...

8 Related Research

Advisory Note: Eight Fundamentals for Digital Risk Mitigation in the Age of Transformation – 71302
Advisory Note: Integrating Security into an Agile DevOps Paradigm – 71125
Architecture Blueprint: Access Governance and Privilege Management - 79045
Architecture Blueprint: Identity and Access Management – 72550
Blog: PAM Can Reduce Risk of Compliance Failure but is Part of a Bigger Picture
Blog: Privileged Access Management can Take on AI-Powered Malware to Protect Identity-Based Computing
Leadership Brief: Privileged Account Management Considerations – 72016
Leadership Compass: Access Controls Tools for SAP Environment – 80104
Leadership Compass: Identity Provisioning – 70949
Leadership Compass: Identity Governance & Administration – 71135
Leadership Compass: Privileged Access Management - 79014