Rolling out access hours at Temporal
May 30, 2023

Summary
This post details the implementation of Just-In-Time (JIT) access for Temporal engineers using Common Fate. It quantifies the security benefits of limiting access to only when needed, highlighting that engineers only require access for approximately 23.8% of the week. The post also discusses how JIT access reduces the attack surface by limiting the temporal window for exploitation, even if credentials are compromised. It advises a gradual rollout, starting with giving users what they want and then tightening scopes and implementing approvals.