<img src="https://ws.zoominfo.com/pixel/6169bf9791429100154fc0a2" width="1" height="1" style="display: none;">
Curious about how StrongDM works? 🤔 Learn more here!

StrongDM Policy Playbooks

All Select Update Connect Global Impersonate
policies-impresonate-banner-new
Connect > Require MFA for Escalating Privilege in Kubernetes
Block admin access to Kubernetes; enhance with context and approvals.
connect-policies-new
Connect > Restrict Connections to Sanctioned IP Addresses
Restrict access to sanctioned IPs; enhance with context and MFA.
connect-policies-new
Connect > Restrict Connecting to Production Resources to Only During Business Hours
Restrict production access to business hours; enhance with MFA and admin approval.
connect-policies-new
Connect > Notify European Citizens That Their Sessions Are Being Recorded
Notify EU users that sessions are recorded and actions logged.
connect-policies-new
Connect > Restrict Access to GDPR Resources to the EU
Restrict GDPR resource access to EU regions only.
connect-policies-new
Connect > Restrict Access to Resources to EU Only
Enforce resource access restrictions to EU-only regions.
select-policies-new
Select > Restrict Access to Users Data Table
Block exfiltration and secure database user credentials to avoid unauthorized access.
select-policies-new
Select > Require MFA Prompt to Read Data From the Users Table
Require MFA to prevent database user exfiltration and credential theft.
update-policies-new
Update > Require Admin Approval to Update Cardholders Table
Require admin approval to update Credit Card Holder information.
connect-policies-new
Connect > Forbid and Revoke Sessions to Prod Resources From Unhealthy Endpoints
Assess and revoke sessions based on device trust to maintain zero trust.
connect-policies-new
Connect > Require an MFA Prompt to Connect to All Prod Resources
Require MFA to prevent data exfiltration and unauthorized Production access.
select-policies-new
Select > Limit Max Rows for Non-Approved Users
Limit data collection and reduce DoS risk by restricting read actions.
global-policies-new
Select > Forbid Access to the Database Unless the User Is in the Approved Role
Forbid PII database access without pre-approved roles, enforcing RBAC.
update-policies-new
Update > Require Admin Approval to Update “Cardholders” Table on Any PCI Database
Require admin approval for PCI cardholder table updates to prevent attacks.
select-policies-new
Select > Restrict SELECT Actions Based on Geo Privacy Requirements, Returning 10 Rows
Limit rows and restrict US geolocation access to prevent SQL flood DoS attacks.
connect-policies-new
Connect > Restrict Connecting to a Critical Database to Only During Business Hours
Restrict production database access to business hours to prevent anomalies.
connect-policies-new
Connect > Permit Connections to Production Kubernetes Clusters
Enforce MFA for privileged users accessing production Kubernetes to prevent unauthorized access and credential compromise.
connect-policies-new
Connect > Restrict Connecting to Production Kubernetes Clusters to Only During Business Hours
Restrict production cluster access to business hours to prevent anomalies.
connect-policies-new
Connect > Require MFA for Production SSH Servers
Enforce MFA for privileged access to production Linux servers to prevent unauthorized access.
IdentityandAccessManagement(IAM)_HighPerformer_Mid-Market_Americas_HighPerformer
IdentityandAccessManagement(IAM)_HighPerformer_Americas_HighPerformer
PrivilegedAccessManagement(PAM)_Leader_Leader
PrivilegedAccessManagement(PAM)_UsersMostLikelyToRecommend_Small-Business_Nps
PrivilegedAccessManagement(PAM)_BestSupport_Small-Business_QualityOfSupport
PrivilegedAccessManagement(PAM)_EasiestToUse_Small-Business_EaseOfUse
PrivilegedAccessManagement(PAM)_EasiestToDoBusinessWith_Small-Business_EaseOfDoingBusinessWith
PrivilegedAccessManagement(PAM)_Leader_Mid-Market_Leader

Watch a StrongDM walkthrough. Book a personalized demo.

Book Demo