How can organizations determine who has access to which cloud resources—and whether that access creates risk? This video explains how cloud infrastructure entitlement management (CIEM) helps security teams discover cloud identities, calculate effective permissions, identify excessive access and enforce least privilege across multicloud environments.
David Trigano, Senior Manager of Product Management at Palo Alto Networks, demonstrates how Cortex Cloud CIEM connects identity, application and sensitive-data risks into complete cloud attack paths.
You’ll learn how to:
1. Discover human and non-human identities across cloud environments.
2. Map users, roles, groups, service accounts and API keys to their cloud permissions.
3. Calculate net-effective permissions to understand what each identity can actually access.
4. Identify overprivileged and misconfigured cloud identities.
5. Connect application vulnerabilities, excessive permissions and sensitive data into contextual attack paths.
6. Remove unused permissions and enforce least-privilege access at scale.
7. Integrate CIEM with CSPM, DSPM and AI-SPM in a unified CNAPP.
The video walks through a real-world scenario in which a vulnerable application relies on an overprivileged identity. If an attacker exploits a remote code execution vulnerability, the identity’s excessive permissions can create a direct attack path to sensitive cloud data.
Cortex Cloud CIEM provides multicloud visibility across AWS, Microsoft Azure, Google Cloud and OCI. It helps organizations understand who can take which actions on which resources, prioritize identity risks and safely rightsize cloud permissions.
Chapters:
00:00 Why cloud identities create security risk
00:36 Questions cloud security teams must answer
00:47 How Cortex Cloud CIEM manages cloud identities
00:58 Human and non-human cloud identities
01:13 How identities receive permissions
01:52 Why cloud permission sprawl creates risk
02:05 Overprivileged identity attack scenario
03:13 Exploiting a remote code execution vulnerability
03:50 How excessive permissions expose sensitive data
03:54 How Cortex Cloud identifies the attack path
04:29 Calculating effective cloud permissions
04:47 Connecting CIEM, CSPM, DSPM and AI-SPM
05:13 Unifying security from code to cloud to SOC
05:43 Book a Cortex Cloud CIEM demo
Explore Cortex Cloud CIEM:
https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management
Learn what CIEM is:
https://www.paloaltonetworks.com/cyberpedia/what-is-ciem
Learn how to take control of your cloud identities
https://www.paloaltonetworks.com/resources/webcasts/making-identity-the-control-plane-of-cloud-security-with-cortex-cloud
Explore Cortex Cloud:
https://www.paloaltonetworks.com/cortex/cloud
#CIEM #CloudSecurity #IdentitySecurity
