I'm reaching out to gather insights on managing remote access security for multiple teams in our Azure environment. As part of enhancing our security posture, we're moving to a more segmented architecture with specific permissions. We've already cleaned up our virtual machines and restructured our resources, but this has introduced challenges in enabling remote access to necessary tools like networking portals, SQL databases, and storage accounts for our remote workforce. I've considered setting up VPN groups, but our current setup uses a single pool of IPs for point-to-site VPN, which seems overly restrictive. The alternative option of using jumpboxes seems impractical, as I might end up needing 10 to 20 of them, negating recent cost-saving measures. How do you manage secure remote access for different teams without overlap? Any advice would be greatly appreciated—I might be overcomplicating things!
1 Answer
You might want to consider using a Privileged Access Management (PAM) solution. These can help you control who accesses what, especially with so many teams needing individual resources. It really helps in ensuring security while simplifying access management.
Are you thinking about PAM solutions like BeyondTrust? That could be a solid choice for managing permissions.