Identity and access management (IAM)
The discipline of managing who or what can access a system, and what they can do.
Learn it through a story
- Identity Is the New Perimeter (Cybersecurity for Juniors 3, Ch 12)
Related terms
- HTTPS A secure, encrypted connection to a website, shown by a padlock in the address bar.
- HTTPS / TLS Encryption that protects your connection to a specific site, shown as a padlock in the browser.
- IAM (identity and access management) The system of roles and permissions controlling who can access what in the cloud.
- Identity provider A central service other systems rely on to verify who someone is.
- IDOR (Insecure Direct Object Reference) A flaw where a system trusts an ID in a request instead of checking who's allowed to see it.
- Image scanning Automatically checking a container image's layers for known vulnerabilities.