📄️ Apono
Apono: Just-in-Time (JIT) access management platform for cloud, Kubernetes, and databases. Granular control, auditing, least privilege, automated approvals, and integration with AWS, Azure, GCP, PostgreSQL, and more.
📄️ Architecture
Apono architecture: how the connector works, communication with cloud providers, data flow between components, Identity Provider integration, and the SaaS model with lightweight agents.
📄️ Identity Providers
How to configure Identity Providers in Apono: integration with Microsoft Entra ID, Okta, and Google Workspace. Manager hierarchy configuration, group synchronization, SCIM, and how Apono uses organizational structure for approval flows.
📄️ AWS Deploy
Apono Connector deployment on AWS: how to deploy via CloudFormation on the management account or with delegated permissions, Organization and single account scenarios, ECS Fargate, network configuration, VPC, subnet, cross-account roles, and connector verification.
📄️ Inventory
How Apono discovers and catalogs resources after connector deployment: automatic discovery, centralized Inventory with advanced filters, AQL, Scopes for logical resource grouping, tagging strategy for scalable access control, and integration with Access Flows.
📄️ ChatOps
Apono integration with Slack and Microsoft Teams for ChatOps: requesting and approving access directly in chat, Slack Bot configuration, notification channels, interactive button approval, and complete flow without leaving the messenger.
📄️ SSM Access
How Apono manages Just-in-Time access to EC2 instances via AWS Systems Manager (SSM): automatic granting and revoking of IAM ssm:StartSession permissions, policy-based approval, full audit trail, and elimination of standing access.
📄️ How It Works
Understand Apono's internal permission model on AWS: single PermissionSet per account, single role per user, independent permission accumulation and removal per request, granular expiration, and how the same principle applies to databases with native users.
📄️ RDS Access
How Apono manages Just-in-Time access to RDS databases on AWS: scenarios with IAM authentication (rds-db:connect policy) and native users (automatic creation and removal of temporary credentials), granting and revocation flows, and comparison between both models.
📄️ Scopes
Why Scopes are the most critical security component in Apono: how inventory filters limit what each Access Flow can grant, segmentation strategies by environment and criticality, risks of flows without defined scope, and how to protect access even when approvers don't rigorously evaluate requests.
📄️ Access Flows
How to configure Access Flows in Apono: flow components (who requests, what they can access, how it's approved, for how long), approval types, duration and permissions, best practices for structuring flows by team and scenario, common mistakes, and practical configuration examples.