Skip to content

Back to the catalog

Orca Security: Cloud Identity & Entitlement Management Series
orca.securityarticle

Orca Security: Cloud Identity & Entitlement Management Series

Orca Security explainer on entitlement sprawl (a.k.a. privilege creep) in cloud environments: the gradual accumulation of unused permissions across human and non-human identities, driven largely by machine identities (service accounts, roles, keys) that outnumber human users by over 80-to-1 per CyberArk's 2025 report. It distinguishes granted vs. effective permissions, explains why static IAM exports miss real risk, walks through detection via AWS IAM Access Analyzer, Azure Entra Permissions Management, and GCP IAM Recommender, and lays out controls (least privilege, JIT access, continuous automated reviews, RBAC/ABAC, NHI governance, zero trust) before positioning Orca's agentless CIEM (SideScanning) as the automation layer.

TL;DR Vendor explainer on how unused cloud IAM permissions (especially on machine identities) become attack paths, and how CIEM tooling detects/controls them.
Open original ↗

Organisations named here

  • PCI DSS

Technologies named here

  • AWS
  • Orca Cloud Security Platform
  • SideScanning™
  • Azure
  • AWS IAM Access Analyzer
  • Google Cloud
  • Azure Entra Permissions Management
  • Google Cloud IAM Recommender
  • AWS IAM
  • Orca Security
  • SOC 2

Techniques named here

  • Entitlement sprawl / privilege creep
  • Privilege escalation
  • Lateral movement
  • Cross-account trust abuse

Related in Cloud & Infra