CloudKnox

CloudKnox is privileged access management (PAM) software that enables the separation of duties for privileged users, such as IT administrators. CloudKnox restricts and limits administrator actions and arrests administrator errors by having them run through a workflow administered by a security officer. Once an action is approved by the security officer, the cloud administrator can execute it. It is not a martinet like Device Administrator or External Account Manager.