JIT grants temporary, time-limited access to resources only when needed. It shrinks the attack surface by eliminating standing privileges and requiring approval workflows.
Archer