SearchContactBook a demo

Datasheet

SWOT Cloud PAM datasheet

SWOT Cloud PAM pageAsk for the designed PDF

Cloud privileged access management

SWOT Cloud PAM 1.0

Rudratic Technologies

Just-in-time access to AWS, Azure and GCP, brokered at the gateway

SWOT Cloud PAM governs privileged access to the cloud management plane. Engineers stop holding long-lived cloud keys: every session is requested, approved, time-bound and brokered into short-lived STS or OAuth credentials. The Access Gateway inspects each API call inline, denies dangerous operations before they reach the provider, and writes a SHA-256 hash-chained record that the server counter-signs.

The problem

Cloud access tools often broker credentials and collect logs, then leave the CLI, SDK and infrastructure-as-code path to provider audit trails that arrive minutes after the action. A recording written by the user’s own browser can also be edited by the user who owns that browser.

  • 0Standing privileges held between sessions
  • 60 sUpper bound on a revoked grant still working
  • 4Enforcement modes, selected per tenant

Core capabilities

Zero standing privilege

  • Time-bound grants behind multi-stage approval
  • STS AssumeRole and Azure or GCP OAuth, no persistent keys

Inline policy enforcement

  • Dangerous cloud API calls denied before they leave the gateway
  • A revoked grant stops working within 60 seconds

Tamper-evident session log

  • SHA-256 hash chain over every recorded event, client and server
  • Server HMAC anchors each checkpoint with a key clients never hold

Four enforcement modes

  • Extension, Proxy, Both and Isolated, selected per tenant
  • Proxy and Isolated refuse any session that bypasses the gateway

Isolated secure console

  • The console runs server-side in a pooled headless browser
  • The user drives pixels and never receives cloud credentials

SWOT Cloud PAM 1.0 datasheetPage 1 of 2

Enterprise capabilities

Full management-plane coverage

  • Console, CLI, SDK and IaC across AWS, Azure and GCP
  • CloudTrail and Activity Log ingestion as a detective backup

Risk scoring and anomaly detection

  • Deterministic scoring on escalation, exfiltration, IP, geography and timing
  • Feeds risk approvals and step-up MFA before the action proceeds

Identity and tenancy governance

  • SAML and OIDC SSO, MFA, step-up re-verification, break-glass
  • Multi-tenant separation with enforcement policy per tenant

Compliance reporting and export

  • Report packs mapped to SOC 2, ISO 27001, HIPAA, PCI DSS and GDPR
  • Per-session JSON or CSV export carrying its chain verification

Platform modules

Dashboard
Active sessions, pending requests and risk posture on one screen.
Cloud Roles
Discovered AWS, Azure and GCP roles with the entitlements each carries.
Eligible Access
What a user may request today, and the path to activate it.
Approvals
Multi-stage approval queue with justification and time-bound grants.
Risk Approvals
Requests that scored above threshold, routed for a second decision.
Secrets Vault
Provider credentials encrypted at rest, never logged, stripped from proxied calls.
Live Gateway Activity
Brokered API calls as they happen, with terminate on the same screen.
Session Search
Query merged extension and gateway timelines by text or event.
Session Playback
Screens and API transactions on one scrubber, chain verified on load.
Break-Glass Accounts
Dual-control emergency access, logged from request to revocation.
Compliance Reports
Framework-mapped evidence packs generated from the audit record.
Audit Logs
Record of every approval, grant, session and administrative change.

Technical specifications

CloudsAWS, Azure and GCP: console, API, CLI, SDK and IaC
ArchitectureControl plane, Access Gateway, browser extension, isolation service
CredentialsSTS AssumeRole, Azure and GCP OAuth, clamped to the session
RevocationA revoked grant stops working within 60 seconds
RecordingSHA-256 hash chain, server HMAC anchoring, JSON and CSV export
PlatformNode 20+, PostgreSQL 13+, Redis optional, React single-page app
DeploymentSelf-hosted: cloud, on-premises and hybrid

Framework mapping

  • SOC 2
  • ISO 27001
  • HIPAA
  • PCI DSS
  • GDPR

Report packs mapped to these frameworks from the audit record. Whether a control is met depends on your configuration, scope and independent assessment.

Rudratic Technologies Ltd · London and Chennai · info@rudratic.com · rudratic.com/products/swot-cloud-pam

SWOT Cloud PAM 1.0 datasheetPage 2 of 2

Book a demoAll datasheets