Platform & DevOps·Secrets, identity and the supply chain
nobody holds production access by default; you request it, state why, and it expires by itself in an hour.
Just-in-time access
Also calledJIT access, on-demand elevation, time-bound access
Granting elevated permissions temporarily on request rather than holding them permanently. It shrinks the standing blast radius of any compromised account to almost nothing and produces a record of who needed what and why. It only works if the request path is fast, since anything that adds minutes during an incident gets replaced by a permanent grant someone made 'temporarily'.