Sonrai Security has introduced a Just-in-Time (JIT) Access capability within its Cloud Permissions Firewall for AWS, leveraging artificial intelligence to transform cloud access management. The solution eliminates persistent access permissions in production environments by enabling temporary, on-demand access aligned with zero-trust principles, addressing what CEO Brendan Hannigan described as a significant unresolved risk in cloud security.
By integrating Amazon Bedrock, Sonrai provides AI-generated session summaries that offer comprehensive visibility into privileged user activities without requiring manual log reviews. This integration allows organizations to grant users permissions only when necessary and for the shortest required duration, while maintaining operational agility.
Unlike traditional Privileged Access Management (PAM) tools, Sonrai's solution is cloud-native and deployable within hours. The integration with Amazon Bedrock enables rapid development of intelligent session summaries, providing instant context about elevated access activities. Matt Carle, Head of Product at Sonrai Security, emphasized the solution's ability to generate human-readable insights from privileged sessions without additional manual effort.
Key advantages include a security-first design, seamless AWS integration, accelerated time to market, and flexible, cost-effective AI model deployment. The solution is currently available for AWS customers using the Sonrai Cloud Permissions Firewall, with plans to expand support to Azure and Google Cloud Platform in future releases.
This announcement is important because standing access permissions have long been a vulnerability in cloud security, often exploited by attackers. By adopting JIT access, organizations can significantly reduce their attack surface and improve compliance with zero-trust frameworks. The use of AI to generate session summaries also reduces the burden on security teams, allowing them to focus on more strategic tasks. For businesses in the New York City metro area, where many companies operate in regulated industries like finance and healthcare, this solution offers a practical way to enhance cloud security without sacrificing operational efficiency.
