Patent ID: 11895121
Assignee: CAPITIS SOLUTIONS INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 10:
11. The method of claim 10, wherein monitoring the policy associated with the IAM role for the excessive privilege drifts comprises:
retrieving the policy, associated with the IAM role, from a baseline configuration;
retrieving the policy, associated with the IAM role, from a target environment;
analyzing the policy associated with the IAM role from the baseline configuration and the policy associated with the IAM role from the target environment and determining whether the policy associated with the IAM role is drifted;
retrieving the IAM role associated with the policy;
retrieving the Machine-Readable Role Definition (MRRD) for the IAM role;
generating the Role Potential Excessive Service Action List (RPESAL) for the Identity and Access Management (IAM) role by combining the MRRD and the Cloud Provider Service Action Access Reference List; and
generating the Role Actual Excessive Service Action List (RAESAL) with a list of first service actions that are enabled for the IAM role in the Role Potential Excessive Service Action List (RPESAL).