Cloud 101CircleEventsBlog
Help shape the CCSK by participating in the peer reviews for the upcoming CCSK v5 by February 22nd!

Download Publication

What is IAM for the Cloud? - Chinese Translation
What is IAM for the Cloud? - Chinese Translation

What is IAM for the Cloud? - Chinese Translation

Release Date: 11/13/2023

This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translated content falls outside of the CSA Research Lifecycle. For any questions and feedback, contact [email protected].


The purpose of this document is to provide an understanding of the challenges and considerations involved in managing Identity and Access Management (IAM) in the cloud, as well as the importance of IAM to an organization's overall security strategy.


Traditionally, IAM was intended as a general purpose mechanism to restrict and control access to enterprise resources by granting permissions to users or groups or users. The goal was entitlement, not so much control, and access was based entirely on assertions of username and password, coupled with group membership or permissions directly assigned at the resource. This model later evolved to centralize IAM, and access decisions were concentrated centrally at an authority such as a service, server, or Identity infrastructure. The threat landscape has materially changed over the years, and today, IAM is a core component of any digital access model. It evolves to employ ever-increasing visibility, granularity, and control as the nature of users, resources, and systems change.
Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
View translations
Related resources
Machine Identity in Cybersecurity and IAM
Machine Identity in Cybersecurity and IAM
What is IAM for the Cloud?
What is IAM for the Cloud?
Identity Security
Identity Security
Trust Model: The First Step to Ensure Your IT Network
Trust Model: The First Step to Ensure Your IT Network
Published: 02/20/2024
What Are AWS Service Control Policies (SCP)? A Complete Guide
What Are AWS Service Control Policies (SCP)? A Complete Guide
Published: 02/09/2024
Uncovering Hybrid Cloud Attacks Through Intelligence-Driven Incident Response: Part 3 – The Response
Uncovering Hybrid Cloud Attacks Through Intelligence-Driven Inciden...
Published: 02/08/2024
Part 2: How Attackers Exploit OAuth: A Deep Dive
Part 2: How Attackers Exploit OAuth: A Deep Dive
Published: 02/06/2024
Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training