Intro

Apono is a platform for Just-in-Time access management that keeps organizations secure and compliant.

Apono makes it easier for DevOps, DevSecOps, IT and IAM Ops to manage access, reduces risk of human error and attack and eliminates the need for clunky IT service management systems in your everyday work.

If your organization is using Apono, access to cloud resources in development, CI/CD, data repositories, cloud infrastructure and more is managed centrally:

• Admins in the organization set Access Flows which determine who can access what, with how permissions and for how long.
• Developers that need access use Slack, Teams, or CLI to request access
• Access is automatically approved
  OR
• Members of the organization that are set as the approvers must approve the request with Slack or Teams (see guides below)

How to use it:

How it works

Approving access in Slack

1. If your admin installed the Apono Slack app from the Apono Catalog, you should see it in your Slack apps menu:

2. When you have a new access request to review, you will be notified in Slack:

3. Go to the Apono app in Slack
4. You'll see every request as a separate message containing these details:
   1. Request ID
   2. Requester - The user who made the request
   3. Permissions - actions they'd like to perform
   4. Integration - the app which contains the resource they want to access
   5. Resources - the instances they'd like to access
   6. Justification - why the requester wants access
   7. Information about why you are the approver of this request
5. Approve or Reject the request as you see fit based on your company's policies:

• The Slack app has the history of all the different requests you were asked to review
• The same app is also where you will find the history of your own access requests