Home/Templates/Emergency access that works when login is broken
Emergency access that works when login is broken
A separate account that does not depend on your identity provider, and shouts every time it is used.
Terraform
Why bother
Emergency accounts fail two ways. They sit behind the same single sign-on that just went down, or they work quietly and nobody notices they were used. This sets up an account outside the normal login path, with an alert on every sign-in.
How you know it worked
Sign in with it. An alert should reach the on-call channel.
Not written yet
No code exists for this one. It is listed so the gap shows on the coverage table. When it is written, each platform will use:
| Platform | Service |
|---|---|
| AWS | A standalone IAM user with a hardware key and a CloudTrail alarm |
| Azure | A cloud-only account excluded from conditional access, with a sign-in alert |
| Google Cloud | A dedicated super admin with a log-based alert |
| Oracle Cloud | A local user outside the federated domain |