Cloud Infrastructure Entitlement Management: knowing what an identity can really do, not what its policies declare, and reducing excessive permissions.
Cloud permissions result from attached and inherited policies, assumable roles and conditions. CIEM computes effective permissions, compares them to real usage and spots privilege escalations, never-used keys, administrators without a second factor.
The Identities and permissions scanner computes effective permissions in the graph according to each cloud’s model, matches identities present on several clouds, and proposes permission reductions when the cloud exposes usage history. Assumable roles become links of attack paths.
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.