Idira PAM secures high-risk access for IT admins and third-party vendors across hybrid environments. Teams can implement role-specific least privilege, orchestrate secure standing or Just-in-Time (JIT) access, and apply continuous access governance to enforce Zero Standing Privileges (ZSP).
Idira Privileged Access Management (PAM) provides end-to-end security for internal IT admins and third-party vendors, securing high-risk access used to manage hybrid IT infrastructure, cloud platforms, and critical applications. IT teams can implement role-specific least privilege, workflows for both secure standing access and Just-in-Time (JIT) access, and apply continuous governance to achieve Zero Standing Privileges (ZSP).
Idira Modern PAM:
PAM Vault and Safes: A high-security safe that locks down your most powerful admin passwords, automatically rotates them, and audits all usage.
Identity Governance: Automates continuous access reviews and lifecycle management, rightsizing permissions using native AI to enforce Zero Standing Privileges (ZSP).
Secure Infrastructure & Cloud Access: Protects servers, databases, and cloud platforms (AWS, Azure, GCP) by enabling policy-based, Just-in-Time (JIT) access that removes permanent credentials and eliminates standing access. Secure Web Sessions: Monitors and records user activity inside web applications to ensure safe and compliant usage. Remote and Third-Party Access (Vendor PAM): Safely connects remote users and third-party contractors to internal systems through VPN-less and passwordless access.
For custom pricing, EULA, or a private contract, please contact AWS-Marketplace@Idira.com, for a private offer.
Highlights
Unified PAM & Identity Governance: Integrates continuous access reviews, AI-driven permission rightsizing, and lifecycle management directly into the privileged access workflow to ensure seamless, continuous compliance.
Enforcement of Zero Standing Privileges (ZSP): Eliminates the risks of permanent credentials by orchestrating policy-based, Just-in-Time (JIT) access and secure vaults for both internal IT admins and external vendors.
Centralized Operations: Streamlines security by unifying disparate tools into one cohesive platform, delivering a management experience with increased automation that reduces complexity and risk.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing uses a contract pricing model with one dimension. You buy a block of Standard Privilege Cloud Users, sized at 25 users. Pricing is based on user count, so your cost scales with the number of users you cover under the agreement. There are no separate tiers or add-ons on this listing. To extend coverage beyond the included 25 users, you add more user capacity. The dimension grants access to privileged access management functions for cloud users across the contract term.
Top-of-mind questions for buyers
What counts as one Standard Privilege Cloud User for billing?
A user is one human identity granted privileged access through the platform. This covers workforce users, cloud engineers, developers, and contractors. Each person you onboard counts as one of your 25 users. The count is based on identities you cover, not sessions or devices.
What happens if I need to cover more than 25 users?
The listing includes a block of 25 users. To cover additional people, you add more user capacity under the agreement. Cost scales with the number of users, so adding capacity raises your total. There are no separate tiers or add-on dimensions on this listing.
What privileged access functions do the 25 covered users get?
Covered users receive privileged access management functions such as vaulting, just-in-time and zero standing privilege access, session isolation and recording, and brokered access to cloud, infrastructure, and endpoints. These controls apply to each human identity under the contract. All covered users share the same function set.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Need to create a support account in order to generate a support ticket.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
CyberArk PAM solutions provide end-to-end security for internal IT admins & 3rd party vendors enabling secure high-risk access used to migrate, scale and operate applications on-premises or in the cloud. CyberArk allows IT teams to implement role-specific least privilege, and workflows for both secure standing access and Just-in-Time/Zero Standing Privileges workflows.
Britive replaces standing privileges with runtime, ephemeral, fine-grained access across human, non-human, and AI identities. One agentless, proxyless SaaS control plane programs native AWS IAM and STS permissions (and beyond), enforces least privilege at runtime, and simplifies audits with complete identity-level evidence.
Idira EPM removes standing local admin rights and enforces policy-based, just-in-time elevation across Windows, macOS, and Linux - so a compromised identity finds nothing to escalate. Discover, Control, and Govern privilege for every user, machine, and AI agent at the endpoint.
Enhance your PAM CyberArk project's success with our Subject Matter Expertise (SME) Level 3 Services on AWS Marketplace. Benefit from expert guidance and personalized support at every phase.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.