Identity in Cloud

• Identity revolves around
  • authentication
  • authorization
  • governance

Users in the Cloud

• Users:
  • Employees
  • Customers
• Applications
• Cloud resources

Users on premise

• Active Directory is a popular application by microsoft where the users of your org are stored.
• Organizations have started using
  • Office 365
  • Google Workspace
• Companies like okta have solutions for single signon

Groups

• Generally it is easier to manage permissions to groups rather than individuals.

MFA (Multi-Factor Authentication)

• We can use two popular approaches
  • Software based Authenticators
    • Google
    • Microsoft
  • Hardware Based Authenticators

Authorization

• Principle of least privilege
• Just in time access
• Develop Custom Authorizations

Identity in AWS and Azure

• AWS offers a service called as Identity and Access Management
• Azure Manages
  • identity in Microsoft Entra (Formerly Azure Active Directory)
  • Access Managment of a subscription using IAM (Azure RBAC)