Description
CIEM Cloud Resource Search in ISC enables cloud resource-centric governance by providing customers with the ability to search based on their cloud resources. Customers can now directly utilize ISC’s native search bar to query for human identities that have effective access to a specific cloud resource, such as an AWS S3 bucket, an Azure virtual machine, or a GCP project. This direct query capability allows customers to leverage core ISC governance features driven by a resource-centric view, ensuring comprehensive governance over critical cloud infrastructure.
Problem
The inability to quickly identify identities with access to a specific cloud resource can create a governance gap. Without a direct, cloud resource-centric search capability, customers are forced into slow, manual, and multi-step investigations to answer this critical question. This inefficiency makes it difficult to rapidly validate permissions, pivot between different resources, and apply governance controls like certifications or SoD policies at the speed their cloud environment demands.
Solution
CIEM Cloud Resource Search in ISC introduces a new cloud resource parameter directly into the search functionality. IAM Admins and security operators can now search for specific resources using either a qualified search (e.g., resourceName: AWSMyS3Bucket1) or an unqualified search (e.g., AWSMyS3Bucket1). (Note: If a resource name contains hyphens, such as AWS-My-S3-Bucket-1, wrap the search value in double quotes (" ")to ensure an exact match.)
By clicking on a returned cloud resource record, users are taken directly to an identity screen that displays a complete list of all identities with access to that specific resource. This streamlined visibility can then be used to support targeted access certification campaigns, build preventative Separation of Duty policies, and generate on-demand reports, ensuring all cloud infrastructure remains under active and efficient ISC governance.
Who is affected?
All CIEM customers.
Action Required
No action is required, Cloud Resource will now be available for CIEM customers to search by Cloud Resource in ISC Search for H for Human Identities (Machine Identities to follow in a future release).
Important Dates
Available Now!
What is Next Up?
CIEM support and visibility for cloud resource tags and labels including the ability to search by tag and labeling ISC search as well as including machine identities in search in regards to cloud resources.