Cloud infrastructure entitlement management
CIEM articles
Which identities can assume which roles and reach which data, modelled as edges rather than a quarterly access review.
Cloud infrastructure entitlement management (CIEM) answers which human and workload identities can assume which roles and reach which data. These articles explain what CIEM is, how to find excess privilege by modelling entitlements as graph edges, and how identity attack paths run from an assumable role to a data store.
- Cloud permission changes: prove access was reducedVerify cloud permission reductions with scoped access tests, session checks and fresh evidence, so an approved change becomes a defensible closure. · Sujan Singh
- Cloud access review: verify unused permissionsReview unused cloud permissions using ownership, observation scope and tests, without confusing missing activity with proof of unnecessary access. · Sujan Singh
- What is CIEM? Cloud infrastructure entitlement managementWhat is CIEM? How cloud infrastructure entitlement management finds excess permissions across human and machine identities, and how it differs from IAM. · Sujan Singh
- Excess privilege in the cloud: model it as graph edgesFind excess cloud privilege by modelling identities, roles and trust policies as graph edges you can walk, rank and cut, not rows in an access review. · Sujan Singh
- Identity attack paths: from assumable role to data storeTrace identity attack paths from a workload identity through assumable roles and trust policies to the data store it can reach, then cut one edge. · Sujan Singh
See it on your stack
See connected security in action.
Explore the workflow with your engineering, security and compliance teams. No repository access is needed for the initial demonstration.