Download Publication

What is IAM for the Cloud?

Release Date: 07/12/2023

Working Group: Identity and Access Management

The purpose of this document is to provide an understanding of the challenges and considerations involved in managing Identity and Access Management (IAM) in the cloud, as well as the importance of IAM to an organization's overall security strategy.

Traditionally, IAM was intended as a general purpose mechanism to restrict and control access to enterprise resources by granting permissions to users or groups or users. The goal was entitlement, not so much control, and access was based entirely on assertions of username and password, coupled with group membership or permissions directly assigned at the resource. This model later evolved to centralize IAM, and access decisions were concentrated centrally at an authority such as a service, server, or Identity infrastructure. The threat landscape has materially changed over the years, and today, IAM is a core component of any digital access model. It evolves to employ ever-increasing visibility, granularity, and control as the nature of users, resources, and systems change.

Download this Resource

Bookmark

Related resources

Related Resources

Data Security Platforms: 9 Key Capabilities and Evaluation Criteria

Published: 09/19/2023

IoT Security and the Infinite Game

Published: 09/19/2023

Exploring the Intersection of IAM and Generative AI in the Cloud

Published: 09/15/2023

Reshaping Security Landscapes: The Essence of Cyber Transformation

Published: 09/15/2023

View all blogs

View all webinars

Acknowledgements

Heinrich Smit

Governance, Risk, Compliance (GRC), Semperis

Heinrich Smit

Governance, Risk, Compliance (GRC), Semperis

This person does not have a biography listed with CSA.

Shruti Kulkarni

Cyber Security Architect, 6point6

Shruti Kulkarni

Cyber Security Architect, 6point6

I am a security professional with experience across various domains of security. I work in defining organisation’s security strategy, security architecture and security practices. Translating business objectives and risk management strategies into specific security processes enabled by security technologies and services. I work on gap analysis, design, implementation and maintenance of ISO27001, PCI-DSS and GDPR, including Greenfield implem...

Ravi Erukulla

Ravi Erukulla

This person does not have a biography listed with CSA.

Ramesh Gupta

Ramesh Gupta

This person does not have a biography listed with CSA.

Jonathan Flack

Jonathan Flack

This person does not have a biography listed with CSA.

David Strommer

David Strommer

This person does not have a biography listed with CSA.

Venkat Raghavan

Venkat Raghavan

This person does not have a biography listed with CSA.

Faye Dixon

Faye Dixon

This person does not have a biography listed with CSA.

Ryan Gifford

Research Analyst, CSA

Ryan Gifford

Research Analyst, CSA

This person does not have a biography listed with CSA.

Alon Nachmany

Alon Nachmany

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Join this Working Group

View all Working Groups

Download Publication

What is IAM for the Cloud?

Download this Resource

Related Resources

Machine Identity in Cybersecurity and IAM

CSA Code of Conduct Gap Resolution and Annex 10...

State of Financial Services in Cloud

Data Security Platforms: 9 Key Capabilities and Evaluation Criteria

IoT Security and the Infinite Game

Exploring the Intersection of IAM and Generative AI in the Cloud

Reshaping Security Landscapes: The Essence of Cyber Transformation

Acknowledgements

Interested in helping develop research with CSA?

Related Certificates & Training

Corporate Membership

Join as an Individual

Research

Find a...

Certificates

Events

Education

Popular Resources

About CSA

Our Team

Legal

Cloud Security Glossary