Hot Topics
Cloud Security Security Bloggers Network 
SBN

A Quick Look Into Cloud Infrastructure Entitlement Management (CIEM)

by davidmundy on January 6, 2021

The cloud security solutions market is growing rapidly and there are many types of solutions to support your specific business needs. But figuring out the right tool, let alone the right type of tool, can be difficult. Gartner has 5 security archetypes that fall under the broader cloud security management platform umbrella.  This article gives a quick look into the CIEM archetype:

What Is It?
In its 2020 Cloud Security Hype Cycle, Gartner included a new category and corresponding “C” acronym, CIEM. This new archetype describes solutions focused on cloud Identity and Access Management (IAM), which is often too complex and dynamic to be managed effectively by native CSP tools alone. The emerging CIEM category is designated for technologies that provide identity and access governance controls with the goal of reducing excessive cloud infrastructure entitlements and streamlining least-privileged access controls across dynamic, distributed cloud environments.

In What Context Is It Best Used?
IaaS and PaaS environments.

Benefits and Limitations

Benefits

  • Provides visibility into who and what can access your cloud resources.
  • Replaces time-consuming intervention to remediate overly permissive access and entitlements.
  • Protects sensitive data.
  • Prevents overly permissive or unintended access. 
  • Enables and empowers audit and compliance functions.

Limitations

Many CIEM solutions are not constructed holistically; rather, many vendors that deal with IAM outside the cloud are creating piecemeal solutions based on separate products that deal with identity governance and administration, access management, and multi-factor authentication. Managing identity and access in the cloud requires a much broader contextual understanding of an organization’s cloud environments and the various  complex policy layers that determine access and permissions.

For a deeper dive into Gartner’s cloud security archetypes, read: A Practical Guide to Gartner’s Cloud Security Archetypes.

The post A Quick Look Into Cloud Infrastructure Entitlement Management (CIEM) appeared first on DivvyCloud.

*** This is a Security Bloggers Network syndicated blog from DivvyCloud authored by davidmundy. Read the original post at: https://divvycloud.com/blog-ciem/?utm_source=rss&utm_medium=rss&utm_campaign=blog-ciem

davidmundy , , ,