Cloud 101CircleEventsBlog
Master CSA’s Security, Trust, Assurance, and Risk program—download the STAR Prep Kit for essential tools to enhance your assurance!

Download Publication

Defining Shadow Access: The Emerging IAM Security Challenge
Defining Shadow Access: The Emerging IAM Security Challenge
Who it's for:
  • IAM Program Leads
  • Security Leads

Defining Shadow Access: The Emerging IAM Security Challenge

Release Date: 09/12/2023

Shadow Access is unmonitored, unauthorized, invisible, unsafe, and generally over-permissioned cloud access. This emerging Identity and Access Management (IAM) security challenge has arisen with the growth of cloud computing, DevOps, cloud native architectures, and data sharing. An increased use of access and entitlements that connect cloud services together, coupled with automated infrastructure and software development, results in incorrectly or unexpectedly permissioned accounts and resources.

The consequences of Shadow Access are massive and threaten to impact any organization that has an evolving cloud. This short IAM security document summarizes the background, causes, and impact of Shadow Access, as well as outlining the path forward to regain the benefits of a dynamic and secure cloud environment.

Key Takeaways: 
  • The background and definition of Shadow Access
  • What causes Shadow Access, including the complexity and process changes
  • The impacts of Shadow Access 
Download this Resource

Prefer to access this resource without an account?
Download the publication. Download the presentation.

Bookmark
Share
Related resources
Identity and Access Management Working Group Charter 2024
Identity and Access Management Working Group Ch...
Confronting Shadow Access Risks: Considerations for Zero Trust and Artificial Intelligence Deployments
Confronting Shadow Access Risks: Considerations...
Beyond Passwords: The Role of Passkeys in Modern Web Security
Beyond Passwords: The Role of Passkeys in Moder...
Why Application-Specific Passwords are a Security Risk in Google Workspace
Why Application-Specific Passwords are a Security Risk in Google Wo...
Published: 11/19/2024
Group-Based Permissions and IGA Shortcomings in the Cloud
Group-Based Permissions and IGA Shortcomings in the Cloud
Published: 11/18/2024
9 Tips to Simplify and Improve Unstructured Data Security
9 Tips to Simplify and Improve Unstructured Data Security
Published: 11/18/2024
Zero Standing Privileges (ZSP): Vendor Myths vs. Reality
Zero Standing Privileges (ZSP): Vendor Myths vs. Reality
Published: 11/15/2024
Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training