How Cortex Cloud Secures Cloud Identities
How can organizations determine who has access to which cloud resources—and whether that access creates risk? This video explains how cloud infrastructure entitlement management (CIEM) helps security teams discover cloud identities, calculate effective permissions, identify excessive access and enforce least privilege across multicloud environments. David Trigano, Senior Manager of Product Management at Palo Alto Networks, demonstrates how Cortex Cloud CIEM connects identity, application and sensitive-data risks into complete cloud attack paths. You’ll learn how to: 1. Discover human and non-human identities across cloud environments. 2. Map users, roles, groups, service accounts and API keys to their cloud permissions. 3. Calculate net-effective permissions to understand what each identity can actually access. 4. Identify overprivileged and misconfigured cloud identities. 5. Connect application vulnerabilities, excessive permissions and sensitive data into contextual attack paths. 6. Remove unused permissions and enforce least-privilege access at scale. 7. Integrate CIEM with CSPM, DSPM and AI-SPM in a unified CNAPP. The video walks through a real-world scenario in which a vulnerable application relies on an overprivileged identity. If an attacker exploits a remote code execution vulnerability, the identity’s excessive permissions can create a direct attack path to sensitive cloud data. Cortex Cloud CIEM provides multicloud visibility across AWS, Microsoft Azure, Google Cloud and OCI. It helps organizations understand who can take which actions on which resources, prioritize identity risks and safely rightsize cloud permissions. Chapters: 00:00 Why cloud identities create security risk 00:36 Questions cloud security teams must answer 00:47 How Cortex Cloud CIEM manages cloud identities 00:58 Human and non-human cloud identities 01:13 How identities receive permissions 01:52 Why cloud permission sprawl creates risk 02:05 Overprivileged identity attack scenario 03:13 Exploiting a remote code execution vulnerability 03:50 How excessive permissions expose sensitive data 03:54 How Cortex Cloud identifies the attack path 04:29 Calculating effective cloud permissions 04:47 Connecting CIEM, CSPM, DSPM and AI-SPM 05:13 Unifying security from code to cloud to SOC 05:43 Book a Cortex Cloud CIEM demo Explore Cortex Cloud CIEM: https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management Learn what CIEM is: https://www.paloaltonetworks.com/cyberpedia/what-is-ciem Learn how to take control of your cloud identities https://www.paloaltonetworks.com/resources/webcasts/making-identity-the-control-plane-of-cloud-security-with-cortex-cloud Explore Cortex Cloud: https://www.paloaltonetworks.com/cortex/cloud #CIEM #CloudSecurity #IdentitySecurity