The CyberArk Cloud Entitlements Manager is a privilege-based, artificial intelligence-powered service designed to strengthen the security of cloud environments. Through continuous monitoring of cloud access, CyberArk enforces least privilege by identifying and removing excessive cloud permissions that can leave organizations vulnerable – significantly reducing risk and improving overall visibility and security.
Cloud-agnostic visibility and control
An ESG survey revealed that over-permissioned accounts and roles is the top-cited cloud service misconfiguration detected and overly permissive privileges is the most commonly cited type of cybersecurity attack against cloud applications and services experienced over the last 12 months.
As organizations rapidly scale cloud deployments and adopt advanced services to digitally transform their business, the creation of human, application and machine identities is accelerating.
Access permissions for these identities are often granted by default, based on group or role, and can go unused or have more entitlements than they actually need.
What is it and how it works
CyberArk Cloud Entitlements Manager is a key component of CyberArk’s Identity Security strategy that starts with Zero Trust and uses artificial intelligence to understand context and intent in order to properly assess risk and take appropriate actions.
Because all identities can become privileged under certain conditions, traditional approaches to managing and securing identities have become obsolete. This is especially true in the cloud where identities and their permissions are constantly being added or changed.
It’s critical for organizations to have a consistent strategy for protecting access by a range of human, application and machine identities, and the services they consume.
“Cloud adoption has massively accelerated, but as new environments and cloud services are deployed, thousands of identity-based permissions are created – many of which go overlooked,” said Chen Bitan, chief product officer, CyberArk.
He warned that if not properly configured or managed, these identities create a pathway for attackers to gain privileged access and ultimately compromise an entire cloud environment.
“CyberArk Cloud Entitlements Manager helps organizations take back control of cloud security by transforming how these permissions are secured and managed while also delivering unprecedented time to value and operational efficiency,” he added.
