Identity
Cloud identity and access
Plan cloud access for staff, administrators and workloads with narrow permissions, protected sign-in and a reviewable removal process.
Section
Identity
Identity
Comparing public and private application access
Public and private access describe the network path to an application, not whether its users are trusted.
Identity
Designing roles with the minimum required permissions
Build cloud roles from required tasks, resource scope and duration, then check the grant and its holder's other access.
Identity
Escalating a suspected cloud account compromise
Handoff a suspected cloud account compromise, preserve available evidence and coordinate containment and reporting decisions.
Identity
Keeping secrets out of deployment files: checks & response
Keep credential values out of deployment files, review leak paths and respond if a real secret is committed.
Identity
Managing service identities separately from employee access
Give applications owned identities, choose supported authentication, limit runtime access and retire identities with their workloads.
Identity
Removing dormant credentials from cloud environments
Find cloud credentials that appear unused, check dependencies, disable and observe them, then delete confirmed dormant credentials.
Identity
Reviewing privileged cloud accounts
Identify privileged cloud grants, confirm each business need and close retain, reduce or remove decisions with platform limits in view.