Patent ID: 11895121
Assignee: CAPITIS SOLUTIONS INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 4:
5. The method of claim 4, wherein identifying the Role Actual Excessive Service Action List (RAESAL) for the IAM role by comparing the Role Potential Excessive Service Action List (RPESAL) and the policy associated with the IAM role comprises:
identifying a list of first service actions that are enabled for the IAM role in the Role Potential Excessive Service Action List (RPESAL) by identifying a first specific statement in the policy results in allowing access to the IAM role by using cloud provider services;
identifying a list of second service actions that are disabled for the IAM role in the Role Potential Excessive Service Action List (RPESAL) by identifying a second specific statement in the policy results in denying access to the IAM role by using cloud provider services; and
identifying the Role Actual Excessive Service Action List (RAESAL) based on the list of first service actions, the list of second service actions, and the Role Potential Excessive Service Action List (RPESAL).