Glossary

CIEM

Cloud infrastructure entitlement management

Tools that read cloud IAM policies, role trust and activity logs to find unused or excessive permissions and privilege escalation paths, so each identity can be cut back to what it uses.

Defined in: Microsoft Learn: Cloud infrastructure entitlement management (CIEM) in Defender for Cloud

Covered in

Guide

Choose cloud security posture tools and apply zero trust

What CSPM, CWPP, CIEM, CNAPP, DSPM and ASPM each find and miss, how they overlap, how to evaluate one on your own accounts, and how zero trust as defined in NIST SP 800-207 uses what they measure.