Hey everyone. I've got a demo scheduled with Clutch Security soon. My team is starting to look at PAM solutions for our AWS accounts.
I'm pretty new to this whole privileged access management thing. I've only used IAM users/roles and some basic MFA so far.
What should I be looking out for in the demo? Are there specific questions I should ask about JIT access or break-glass procedures? I'm worried about complexity and cost mostly 😅
Still learning
Hey there, welcome to the world of PAM! Coming from basic IAM, you're right to focus on complexity - that's the biggest hurdle.
Absolutely grill them on JIT and break-glass. Ask them to show you the *exact* workflow for requesting emergency AWS console access at 3 a.m. Saturday. How many clicks? Does it page an admin, or is it fully automated? That's where the rubber meets the road.
On cost, don't just ask about licensing. Ask about the "admin tax" - how much ongoing engineering time is needed to keep the rules and roles updated as your team grows? Some tools hide a ton of operational overhead. Good luck, and let us know how it goes!
Spreadsheets > opinions