CyberArk has announced the launch of CyberArk Cloud Entitlements Manager. The new service is said to be the industry’s first privilege-based, artificial intelligence-powered service, designed to strengthen the security of cloud environments. Through continuous monitoring of cloud access, CyberArk enforces least privilege by identifying and removing excessive cloud permissions that can leave organizations vulnerable – significantly reducing risk and improving overall visibility and security.
CyberArk Cloud Entitlements Manager is an important element of CyberArk’s Identity Security strategy. It starts with Zero Trust and uses artificial intelligence to understand context and intent in order to properly assess risk and take appropriate actions. Since all identities can become privileged under certain conditions, traditional approaches to managing and securing identities have become obsolete. This is especially true in the cloud where identities and their permissions are constantly being added or changed. It’s therefore critical for organizations to have a consistent strategy for protecting access by a range of human, application and machine identities, and the services they consume.
“Cloud adoption has massively accelerated, but as new environments and cloud services are deployed, thousands of identity-based permissions are created – many of which go overlooked,” said Chen Bitan, chief product officer, CyberArk. “If not properly configured or managed, these identities create a pathway for attackers to gain privileged access and ultimately compromise an entire cloud environment. CyberArk Cloud Entitlements Manager helps organizations take back control of cloud security by transforming how these permissions are secured and managed while also delivering unprecedented time to value and operational efficiency.”
CyberArk Cloud Entitlements Manager can be configured, provide an assessment of exposure levels and deploy granular remediations – quickly delivering exceptional customer value, in a matter of just an hour. The cloud agnostic service continuously detects hidden, misconfigured and unused cloud permissions, thus improving security by providing a consistent approach to cloud least privilege. For cloud, security and Identity and Access Management teams, the service drives increased productivity with a simple, intuitive user experience that includes a centralized dashboard with a single view of permissions across Amazon Web Services (AWS), including Amazon Elastic Kubernetes Service (Amazon EKS), Google Cloud Platform (GCP) and Microsoft Azure environments.
Cloud Entitlements Manager is a part of CyberArk’s growing SaaS portfolio, which also includes Idaptive, Alero, Privilege Cloud and Endpoint Privilege Manager. The service builds on the company’s industry leading privileged access management and IDaaS capabilities to provide unmatched enterprise wide security intelligence by helping to and reduce the growing risk of cloud permission sprawl while offering incomparable operational simplicity.