Cloud 101CircleEventsBlog

Download Publication

What is IAM for the Cloud?
What is IAM for the Cloud?

What is IAM for the Cloud?

Release Date: 07/12/2023

The purpose of this document is to provide an understanding of the challenges and considerations involved in managing Identity and Access Management (IAM) in the cloud, as well as the importance of IAM to an organization's overall security strategy.


Traditionally, IAM was intended as a general purpose mechanism to restrict and control access to enterprise resources by granting permissions to users or groups or users. The goal was entitlement, not so much control, and access was based entirely on assertions of username and password, coupled with group membership or permissions directly assigned at the resource. This model later evolved to centralize IAM, and access decisions were concentrated centrally at an authority such as a service, server, or Identity infrastructure. The threat landscape has materially changed over the years, and today, IAM is a core component of any digital access model. It evolves to employ ever-increasing visibility, granularity, and control as the nature of users, resources, and systems change.




Download this Resource

Bookmark
Share
View translations
Related resources
How to Design a Secure Serverless Architecture
How to Design a Secure Serverless Architecture
Data Loss Prevention in Healthcare
Data Loss Prevention in Healthcare
Machine Identity in Cybersecurity and IAM
Machine Identity in Cybersecurity and IAM
Why Cloud-Forward Tech Teams Need to Abandon Traditional IAM and PAM
Why Cloud-Forward Tech Teams Need to Abandon Traditional IAM and PAM
Published: 12/11/2023
Compromising Identity Provider Federation
Compromising Identity Provider Federation
Published: 12/08/2023
11 Attacks in 13 Months: The New Generation of Supply Chain Attacks
11 Attacks in 13 Months: The New Generation of Supply Chain Attacks
Published: 12/06/2023
Why CISOs Are Investing in AI-Native Cybersecurity
Why CISOs Are Investing in AI-Native Cybersecurity
Published: 12/06/2023

Acknowledgements

Heinrich Smit
Heinrich Smit
Governance, Risk & Compliance at Semperis

Heinrich Smit

Governance, Risk & Compliance at Semperis

Heinrich is a recognized Information Protection and Zero Trust expert who started out in Law, and pivoted to his love of technology during the Tech Boom. He has led teams at software innovators and large financial institutions, has authored entire Information Security Policy stores, and has protected data at both 280,000 seat regulated enterprises and SAAS-based startup unicorns. He is passionate about Privacy and Zero Trust, as well as Def...

Read more

Shruti Kulkarni
Shruti Kulkarni
Cyber Security Architect at 6point6

Shruti Kulkarni

Cyber Security Architect at 6point6

I am a security professional with experience across various domains of security. I work in defining organisation’s security strategy, security architecture and security practices. Translating business objectives and risk management strategies into specific security processes enabled by security technologies and services. I work on gap analysis, design, implementation and...

Read more

Ravi Erukulla Headshot Missing
Ravi Erukulla

Ravi Erukulla

This person does not have a biography listed with CSA.

Ramesh Gupta Headshot Missing
Ramesh Gupta

Ramesh Gupta

This person does not have a biography listed with CSA.

Jonathan Flack Headshot Missing
Jonathan Flack

Jonathan Flack

This person does not have a biography listed with CSA.

David Strommer Headshot Missing
David Strommer

David Strommer

This person does not have a biography listed with CSA.

Venkat Raghavan Headshot Missing
Venkat Raghavan

Venkat Raghavan

This person does not have a biography listed with CSA.

Faye Dixon Headshot Missing
Faye Dixon

Faye Dixon

This person does not have a biography listed with CSA.

Ryan Gifford
Ryan Gifford
Research Analyst, CSA

Ryan Gifford

Research Analyst, CSA

This person does not have a biography listed with CSA.

Alon Nachmany Headshot Missing
Alon Nachmany

Alon Nachmany

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training