Secured Identity and Access Management for Cloud Computing Using Zero Trust Architecture

The chapter begins with an introduction to cloud computing, identity and access management (IAM), and the security threats prevalent in cloud environments. It discusses the basics of cloud computing, categorizing it into Private, Public, and Hybrid/Federated Clouds, and explores the service models of SaaS, PaaS, and IaaS. The importance of IAM in cloud security is emphasized, with a focus on authentication, authorization, and access control mechanisms. The chapter delves into the security threats in cloud environments, such as misconfigurations, unauthorized access, insecure interfaces, and account hijacking. It also presents a literature survey of authentication and security methods in cloud computing. The research methodology involves a comparative analysis of access management protocols, including LDAP, SAML, OAuth, and ABAC. The chapter highlights the challenges faced in user identity and access management by cloud users and proposes solutions such as Zero Trust Architecture (ZTA). It concludes with a comparison of RBAC and ABAC, showcasing the potential of ZTA in enhancing cloud security. The future scope emphasizes the integration of ZTA in access control to protect against various cyber threats.