Cloud Infrastructure Entitlement Management (CIEM) is a cloud security solution used to manage identities and cloud permissions according to the principle of least privilege (POLP).

CIEM uses machine learning and analytics to detect anomalies in account permissions within multi-cloud environments. This visibility allows organizations to apply consistent identity and access management across their cloud services and reduce the risk of data breaches and exfiltration.

• Control plane
• Data plane
• API integration
• Connectors
• Discovery, correlation, and optimization engine
• Security entitlement database
• Management portal
• Organization policies
• Dashboard and visualization

CIEM helps organizations reduce attack surface by removing excessive permissions and ensuring identities have only the access they need to perform their work.