The new capability, integrated directly into the KeeperPAM platform, automates the lifecycle of privileged credentials across major cloud providers including AWS, Azure Entra ID, Google Cloud Platform, and Okta. By eliminating permanent administrative rights, the system ensures that credentials exist only when a task is in progress and are revoked automatically upon session expiration. This approach prevents attackers from leveraging lingering, unused permissions that often serve as entry points into corporate environments.

When a user requests elevated access, the platform applies pre-configured permission levels and manages temporary group memberships. Users connect to target applications through Remote Browser Isolation, ensuring every session is recorded and monitored by KeeperAI. According to Craig Lurey, CTO and co-founder of Keeper Security, the primary issue with existing solutions is their fragmented nature. Because Privileged Cloud is built into the core architecture of KeeperPAM rather than added as an external layer, it maintains a unified audit trail and governance model across human, machine, and AI agent identities. The feature is currently available to all existing KeeperPAM license holders.