Abstract: An Amazon Web Services (AWS) temporary role assumption access credentials invalidation system and process for invalidating AWS temporary role assumption access credentials using session policies and session tags are disclosed. The AWS temporary role assumption access credentials invalidation system is configured to revoke the temporary credentials associated with an AWS temporary role which a user no longer needs and also ensure that a confused user does not inadvertently use an incorrect set of temporary credentials. By invalidating AWS temporary role assumption access credentials using session policies and session tags, inadvertently assumed credentials can also be immediately invalidated. Furthermore, the AWS temporary role assumption access credentials invalidation system revokes temporary credentials when a user is finished with them. This ability to immediately invalidate any issued credential provides a much more secure environment for an organization.

Abstract: A dynamic privileged access governance system and associated processes are disclosed. The dynamic privileged access governance system and processes are cloud-native and adapt to the dynamic nature of the cloud systems.