Temporary elevated access management (TEAM) for AWS IAM Identity Center

This repository contains the source code for deploying TEAM application.

TEAM is an open source solution that integrates with AWS IAM Identity Center and allows you to manage and monitor, time-bound elevated access to your multi-account AWS environment at scale.

The solution is a custom application that allows users to request access to an AWS account only when it is needed and only for a specific period of time. Once the time period has elapsed, elevated access is automatically removed.

Refer to the blog post on the AWS Security Blog for a background and an overview of the TEAM solution.

Getting Started

Visit our Documentation pages to learn more and get started installing and using TEAM.

Quick links

• Deploying the TEAM application
• Solution architecture and workflows
• User guides and walkthrough
• Blog Post
• ReInforce talk
• Feedback form
• Explore the community-supported Terraform provider designed for awsteam

Feedback

We value your input! Please take a moment to provide us with your feedback.

Thank you for helping us improve!

Security

See CONTRIBUTING for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.

Disclaimer

The sample code; software libraries; command line tools; proofs of concept; templates; or other related technology (including any of the foregoing that are provided by our personnel) is provided to you as AWS Content under the AWS Customer Agreement, or the relevant written agreement between you and AWS (whichever applies). You are responsible for testing, securing, and optimizing the AWS Content, such as sample code, as appropriate for production grade use based on your specific quality control practices and standards. Deploying AWS Content may incur AWS charges for creating or using AWS chargeable resources, such as running Amazon EC2 instances or using Amazon S3 storage.