--- title: Finding the right balance of speed and security through... description: Ramp's infrastructure team describes their journey from three broad AWS IAM roles to a fine-grained, just-in-time (JIT) access system for production... canonical: https://daily.dev/posts/finding-the-right-balance-of-speed-and-security-through-just-in-time-access-to-cloud-resources-mjydp4rsv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Finding the right balance of speed and security through just-in-time access to cloud resources | daily.dev og:description: Ramp's infrastructure team describes their journey from three broad AWS IAM roles to a fine-grained, just-in-time (JIT) access system for production... og:url: https://daily.dev/posts/finding-the-right-balance-of-speed-and-security-through-just-in-time-access-to-cloud-resources-mjydp4rsv og:image: https://api.daily.dev/og/posts/mJydp4RSV.png og:image:alt: Finding the right balance of speed and security through just-in-time access to cloud resources og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Finding the right balance of speed and security through just-in-time access to cloud resources **[Ramp Engineering](https://daily.dev/sources/ramp_eng)** · 8 min read · 0 upvotes · 0 comments ## Summary Ramp's infrastructure team describes their journey from three broad AWS IAM roles to a fine-grained, just-in-time (JIT) access system for production environments. They restructured permissions into 20+ team-scoped AWS SSO groups using a custom Terraform module that abstracts IAM complexity. For production access, they partnered with ConductorOne to automate temporary privilege escalation, integrating its CLI into their internal developer tooling so engineers can request time-limited production roles in under 10 seconds. The result improved security posture, reduced audit scope for SOC 2 and ISO 27001 compliance, and maintained developer velocity by minimizing friction. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Beyond IAM: Temporary Cloud Access That Works Across AWS and Azure](https://daily.dev/posts/beyond-iam-temporary-cloud-access-that-works-across-aws-and-azure-bz1gxdp1l) · AWS Fundamentals · 0 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#terraform](https://daily.dev/tags/terraform), [#aws-iam](https://daily.dev/tags/aws-iam) [View this post on daily.dev](https://daily.dev/posts/finding-the-right-balance-of-speed-and-security-through-just-in-time-access-to-cloud-resources-mjydp4rsv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Finding the right balance of speed and security through just-in-time access to cloud resources","url":"https://daily.dev/posts/finding-the-right-balance-of-speed-and-security-through-just-in-time-access-to-cloud-resources-mjydp4rsv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/finding-the-right-balance-of-speed-and-security-through-just-in-time-access-to-cloud-resources-mjydp4rsv"},"datePublished":"2026-07-08T19:14:47.350Z","dateModified":"2026-07-08T19:15:11.800Z","description":"Ramp's infrastructure team describes their journey from three broad AWS IAM roles to a fine-grained, just-in-time (JIT) access system for production...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0a35f01a520a823373531c4e05dac383?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0a35f01a520a823373531c4e05dac383?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Ramp Engineering","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Ramp Engineering","logo":"https://media.daily.dev/image/upload/s--4x5H_pLU--/f_auto/v1704280953/logos/ramp.jpg","url":"https://daily.dev/sources/ramp_eng"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/finding-the-right-balance-of-speed-and-security-through-just-in-time-access-to-cloud-resources-mjydp4rsv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,terraform,aws-iam","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Ramp Engineering","item":"https://daily.dev/sources/ramp_eng"},{"@type":"ListItem","position":3,"name":"Finding the right balance of speed and security through just-in-time access to cloud resources"}]} ```