Cloud Multi-Account Policy Enforcement

Many enterprises have adopted a shift left approach for development and project implementation in the cloud. As part of this effort, many development teams have been given administrative powers to create, deploy and maintain cloud resources and access rights. This has created a multi-cloud account structure in many organizations, leaving each cloud account under the supervision and control of different teams. This can lead to accidental misconfigurations which leads to vulnerability exposures. This paper looks at the implementation of a central policy enforcement area to allow best practices in access control to be applied uniformly across the organization.