Skip to content

Commit

Permalink
docs: tweak JIT
Browse files Browse the repository at this point in the history
  • Loading branch information
tianzhou committed Nov 22, 2024
1 parent 37f0928 commit 6cd02e7
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion content/blog/just-in-time-database-access.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,13 @@ Below shows a typical workflow offered by the existing JIT database access solut
1. Incident ends.
1. JIT system revokes the temporary database user or let the user expire automatically.

A limitation arises when the system used to request and provision JIT database access is separate from the system where end users connect to the databases. For example, while we can review and audit JIT access requests, we cannot record or control the SQL queries executed by end users.
Although existing JIT solutions provide some degree of automation and centralized control, they are
limited by the disconnect between the system used to request and provision JIT database access and
the system where end users actually connect to the databases.

1. Users have to set up different database credentials in their SQL client every time.

1. While the system can review and audit JIT access requests, it cannot record or control the SQL queries executed by the end users.

## Bytebase workflow

Expand Down

0 comments on commit 6cd02e7

Please sign in to comment.