<a href="https://editor.iamzero.dev/">IAM Power Editor</a> was created to alleviate some of the pains associated with Identity and Access Management (IAM) policy creation.
Here are some of the pain points we identified
<ul>
<li>Wasted time looking up ARNs or Privilege descriptions</li>
<li>Time spent fighting syntax and spelling errors</li>
<li>Unknowingly introducing vulnerabilities</li>
</ul>
Welcome to <a href="https://editor.iamzero.dev/">Power Editor</a>. Sift through 9000+ privileges in just a few key presses, ARN's are instantly recommended, their input/validation is streamlined. Additional statements can be added via hotkey, and your policy will be checked in real time for syntax errors or other bugs (thanks <a href="https://github.com/duo-labs/parliament">Parliament</a>!).
We'll be incrementally making improvements to Power Builder over coming months and we would love to hear your feedback.
Common Fate is creating novel solutions to the inherent problems facing Identity and Access Management in the Cloud.

IAM Power Editor was created to alleviate some of the pains associated with Identity and Access Management (IAM) policy creation.

IAM Power Editor - Initial Release

Community Newsletter: May 2023
==============================

Hey everyone! Fraser here with a monthly update for you. If you want to contribute to what we're building, or would like more regular weekly updates, please join our [Slack community](https://join.slack.com/t/commonfatecommunity/shared_invite/zt-q4m96ypu-_gYlRWD3k5rIsaSsqP7QMg) or follow us on [Twitter](https://twitter.com/CommonFateTech).

Here's what's been happening in the world of Common Fate over the past month:

Temporal and Common Fate
------------------------

 
Our friends at Temporal have recently written about their experience with Common Fate to date and how it's been important for their security posture. Importantly, by using Common Fate, they've reduced their administrative access by 90% +.  
 
[You can read the blog post here](https://temporal.io/blog/rolling-out-access-hours-at-temporal). 

![](https://mcusercontent.com/69860be79239e5e8d492037c9/images/1ccabeed-7b9e-ecf9-6c74-e85c1fcef536.png)


 

Common Fate Cloud - Beta
------------------------

We're delighted to announce that Common Fate Cloud is now in private beta!  
 
Common Fate Cloud is our take on safe production access and mitigates the need to give engineers administrative access roles altogether. Some of the use cases that Common Fate Cloud solve include automated runbooks, secrets operations, technical customer support, and database access. 
 
Over the next few weeks, we will be releasing a bunch of new features and we're eager to take any and all feedback.  
 
If you'd like to be invited to the private beta, please reach out to [hello@commonfate.io](mailto:hello@commonfate.io) and we will send you an invite link. 

![](https://mcusercontent.com/69860be79239e5e8d492037c9/images/619bd373-b9fe-24c7-e6e2-770b5effb98b.png)

Here's a sneak peak of the Common Fate Cloud beta and how to get started. 

Granted
-------

 
We've released some small improvements to Granted this month. Summary below:

* Add AWS 'sm' shortcut for secrets manager by [@alexjurkiewicz](https://github.com/alexjurkiewicz) in [#422](https://github.com/common-fate/granted/pull/422)
* Add console-destination switch to enable bookmarking, use regional endpoints by [@perpil](https://github.com/perpil) in [#419](https://github.com/common-fate/granted/pull/419)
* Remove trailing slashes from `granted_sso_start_url` by [@perpil](https://github.com/perpil) in [#411](https://github.com/common-fate/granted/pull/411)
* Auto detect SSO region using html from sso-start-url by [@perpil](https://github.com/perpil) in [#413](https://github.com/common-fate/granted/pull/413)

Full release notes here for [v0.12.0](https://github.com/common-fate/granted/releases/tag/v0.12.0) and [v0.13.0](https://github.com/common-fate/granted/releases/tag/v0.13.0)

Community Shoutouts
-------------------

 
One of our active community members [@perpil](https://github.com/perpil) has built his own integration with his tool Speedrun and Granted. Check out [#419](https://github.com/common-fate/granted/pull/419) and the demo video below: 

<iframe width="560" height="315" src="https://www.youtube.com/embed/hE_GkDSosBM" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>

This shows how Granted can be used as a credentials broker with Speedrun.

Upcoming Events
---------------

 
We have some exciting events coming up in the near future! Mark your calendars for:

* [AWS London Summit](https://aws.amazon.com/events/summits/london/), 7 June 2023. Chris (our co-founder and CTO) will be there in person

Feedback
--------

As always, we want to hear from you! If you have any feedback, suggestions, or ideas for how we can make Granted and Common Fate even better, please don't hesitate to reach out.

Here's our product and community news for May.

Community Newsletter: May 2023


Community Newsletter: April 2023
================================

Hey everyone! Chris here with a monthly update for you. If you want to contribute to what we're building, or would like more regular weekly updates, please join our [Slack community](https://join.slack.com/t/commonfatecommunity/shared_invite/zt-q4m96ypu-_gYlRWD3k5rIsaSsqP7QMg) or follow us on [Twitter](https://twitter.com/CommonFateTech).

Here's what's been happening in the world of Common Fate over the past month:

Provider Registry
-----------------

  
We've released the Provider Registry - a central repository that serves as a public database for storing and sharing Access Providers. The Provider Registry allows developers to discover, publish, and deploy Access Providers built by the Common Fate community.

[Read our announcement](https://www.commonfate.io/blog/provider-registry) or visit the registry at [registry.commonfate.io](https://registry.commonfate.io).

![](https://mcusercontent.com/69860be79239e5e8d492037c9/images/8b72a880-8862-d14c-d970-9f79f1df253f.png)

### Common Fate featured at AWS Community Day Nordics

  
[Theodoros Mylonidis](https://www.linkedin.com/in/tmylo/), a CloudOps Engineer at [Qred](https://en.qred.se/), gave a presentation at AWS Community Day Nordics this month on how Qred uses Common Fate to manage privileged access to their AWS organisation. Theo has led the deployment of Common Fate at Qred and is an advocate for developer-friendly privileged access workflows.  
 

![](https://mcusercontent.com/69860be79239e5e8d492037c9/images/f183dbd7-c0e4-7f32-54d6-866ad2a22bfc.jpeg)

![](https://mcusercontent.com/69860be79239e5e8d492037c9/images/7c83fd87-f3ea-14b3-1a6f-3b6573c04c26.jpeg)

Granted user experience improvements
------------------------------------

[Granted](https://granted.dev/) uses the system keychain to securely store cloud credentials. This month, we released improvements to our keychain integration which make Granted a lot faster to use with tools like [kubectl](https://kubernetes.io/docs/reference/kubectl/):

*   [Improved caching of AWS credentials](https://github.com/common-fate/granted/pull/396) (released in [v0.10](https://github.com/common-fate/granted/releases/tag/v0.10.0))
*   [Improved MacOS keychain UX](https://github.com/common-fate/granted/pull/404) (released in [v0.11](https://github.com/common-fate/granted/releases/tag/v0.11.0))

A big thankyou to [Luke Young (@lyoung-confluent)](https://github.com/lyoung-confluent) for contributing these improvements.  
 

Granted CLI Access Requests
---------------------------

  
In [Granted v0.11](https://github.com/common-fate/granted/releases/tag/v0.11.0), team members using the AWS CLI can now request access to AWS roles using Common Fate directly from the terminal. [Read about this in our documentation here.](https://docs.commonfate.io/granted/recipes/access-requests)

![](https://mcusercontent.com/69860be79239e5e8d492037c9/images/f1c10683-feb5-8ca3-6e4b-b0f41e26a973.gif)

Upcoming Events
---------------

  
We have some exciting events coming up in the near future! Mark your calendars for:

*   [AWS London Summit](https://aws.amazon.com/events/summits/london/), 7 June 2023
    *   Chris (myself! Co-founder and CTO) will be there in person

Feedback
--------

As always, we want to hear from you! If you have any feedback, suggestions, or ideas for how we can make Granted and Common Fate even better, please don't hesitate to reach out.

Until next time,

The Common Fate Team

Here's our product and community news for April.

Community Newsletter: April 2023


Last month, we announced the release of our [Access Provider Framework](https://commonfate.io/blog/access-providers), a tool for building integrations with Common Fate.

Today, we are thrilled to introduce the [Provider Registry](https://registry.commonfate.io/), a central repository that serves as a public database for storing and sharing Access Providers. The Provider Registry allows developers to discover, publish, and deploy Access Providers built by the Common Fate community.

Learn how you can deploy an Access Provider from the Provider Registry by following this [deployment guide](https://docs.commonfate.io/common-fate/providers/deploying).

We built the Access Provider Framework and the Provider Registry with the vision of allowing teams to quickly get started with least privileged access specific to the cloud services and technologies that they use.

![A screenshot of the registry.commonfate.io website, showing the 'aws', 'azure-ad', 'cloudwatch-log-groups', and the 'google-workspace' Access Providers](/blog_posts/provider-registry/screenshot.png)

The final piece of this puzzle is allowing members of the Common Fate community to build and publish your own Access Providers. Stay tuned for more updates on this!

We are excited to share the Provider Registry and look forward to further building it out with your feedback and contributions. Together, we can make least privileged IAM more accessible for all.


A central repository that serves as a public database for storing and sharing Common Fate integrations.

Introducing the Common Fate Provider Registry 


Hi everyone.

Welcome to the March 2023 edition of the Common Fate Community Newsletter! If you want to contribute to what we're building, or would like more regular weekly updates, please join our [Slack community](https://join.slack.com/t/commonfatecommunity/shared_invite/zt-q4m96ypu-_gYlRWD3k5rIsaSsqP7QMg) or follow us on [Twitter](https://twitter.com/CommonFateTech)!

Here's what's been happening in the world of Common Fate over the past month:

# New Features

**Common Fate**

We've been hard at work developing new features to make the Common Fate experience even better. Here are just a few of the new features we've recently released:

- [Access Providers](https://commonfate.io/blog/access-providers) are here. We can now build integrations with the Core Framework of Common Fate and provision access to virtually any service or application. Check out the release notes [here](https://github.com/common-fate/common-fate/releases/tag/v0.15.0).
- [Provider Development Kit (PDK)](https://github.com/common-fate/common-fate-provider). The PDK makes is super simple to develop and deploy Access Providers using Python.

```go
class Provider(provider.Provider):
    api_url = provider.String()

@access.target()
class Target:
    ...

@access.grant()
def grant(p: Provider, subject: str, target: Target):
    # perform API calls here to grant access
    ...

@access.revoke()
def revoke(p: Provider, subject: str, target: Target):
    # perform API calls here to revoke access
    ...
```

# Coming Soon

A few exciting things we’re working on that are set to be released very soon:

**Provider Registry**

- Very soon, a large library of Access Providers will be released and ready for you all to try.
- In the Registry, all Community built providers and Common Fate built providers will be made available for users.

![A screenshot showing Common Fate's Provider Registry](/blog_posts/community-update-march-2023/common-fate-registry.png)

**Approval Policy Engine**

- Teams can define their own approval workflows and automate the process of handling the granting or revoking of access.
- Depending on how teams wish to handle this workflow, the approval process can be customised to suit a number of uses cases.
- Below the ‘multi-party’ approval workflow has been defined.

![A screenshot showing a proof of concept of the Approval Policy Engine](/blog_posts/community-update-march-2023/approval-policy-engine.png)

**Common Fate Cloud**

- The team is hard at work on a managed, self-serve version of Common Fate which includes additional organisational features for larger teams, compliance features and is supported by an SLA.

- If you’d like to know more, you can [join the waitlist](https://commonfate.io/early-access) and we will be in touch.

# Community Spotlight

A few shoutouts from this month to Common Fate Community members:

**Granted**

- [decisivedevops](https://github.com/decisivedevops) made his first contribution in [#377](https://github.com/common-fate/granted/pull/377). Thank you for this and appreciate your help updating our documentation.
- Shoutout to [lyoung-confluent](https://github.com/lyoung-confluent) for sharing his thoughts on a new credential store for Granted ([#395](https://github.com/common-fate/granted/issues/395)). Thank you and appreciate your first contribution.
- Thanks to dsech for opening issue [#390](https://github.com/common-fate/granted/issues/390) regarding allowing a specifying destination profile with `assume --export`
- Thank you to [matthewhembree](https://github.com/matthewhembree) for suggesting another improvement to Granted in [#387](https://github.com/common-fate/granted/issues/387).
- Thanks to [jhuntwork](https://github.com/jhuntwork) for contributing an improvement to our shell support in [#389](https://github.com/common-fate/granted/pull/389).

**Common Fate**

- A bunch of other community members using Common Fate have made some excellent UX suggestions. We really appreciate this feedback!
- special thanks to: Shreyas Damle, Brandon Sherman, Flavio Elawi, David Behroozi, Mike Peachey and Alex Jurkiewicz just to name a few.

If you want to be part of the action, [join our Community Slack here](https://join.slack.com/t/commonfatecommunity/shared_invite/zt-q4m96ypu-_gYlRWD3k5rIsaSsqP7QMg).

# Upcoming Events

We have some exciting events coming up in the near future! Mark your calendars for:

- [AWS Sydney Summit](http://aws.amazon.com/events/summits/sydney/?trkCampaign=aws-summit&trk=), 4 April 2023 (next week)
  - Josh (engineer), Ellie (product) and Jack (engineering) will all be there
- [AWS London Summit](https://aws.amazon.com/events/summits/london/), 7 June 2023
  - Chris (co-founder, CTO) will be there in person

# Feedback

As always, we want to hear from you! If you have any feedback, suggestions, or ideas for how we can make Granted and Common Fate even better, please don't hesitate to reach out.

Until next time,

The Common Fate Team
