Thursday, November 25, 2010

Top 8 Reasons why Identity and Access Management is essential for Cloud Environment?


Here are what I think would be the top 8 reasons for IAM in any Cloud Environment regardless of deployment model or service model.


For Cloud Provider:

1) To make sure who is using your service be it PAAS, IAAS or SAAS.

2) To be compliant with government regulations (this is the same as before).

3) To provide SOD and Least Privileged access to the data hosted on behalf of cloud consumer.

4) To build a trust relationship with cloud consumer.

5) For user based subscription model (such as salesforce.com), cloud provider need to have IAM to provision, audit, de-provision users.

6) To support potential e-Discovery as required by law enforcement agency.

7) To be able to support wide range of users, such as partners, internal cloud administrators, help desk users, end users, and delegated admin users.

8) To support other functions within Cloud Provider such as BI, Sales, and Executive decisions.

I welcome comments on this and would like to seek input on the top 8 reasons why Cloud Consumer will need IAM. IAM includes full life cycle of identity management and access control, single sign on and federation. The top 8 reasons shall be service (IAAS, PAAS, SAAS) and deployment model agnostic (public, private, community and hybrid).

No comments:

Post a Comment