Cloud Right and Access Management

Storm Reply consistently implements the Least-Privilege approach to ensure that each user receives only the minimal necessary permissions. This approach is crucial to minimize the risk of privilege escalations and unwanted access to sensitive resources. Through a careful analysis of the tasks and requirements of each user, Storm Reply provides a robust security architecture that dramatically reduces the potential for data leaks and security breaches.

The concept of self-managed access rights allows users to have some control over roles and permissions needed for their cloud resources without the need to constantly rely on platform administrators. Storm Reply implements roles and policies that give users the freedom to efficiently perform their work while ensuring a high level of security.

Storm Reply employs Permission Boundary Policies to ensure that user permissions are clearly defined and limited. This prevents users from accidentally or intentionally creating roles that grant them more rights than intended. Strict adherence to these policies achieves clear limitations on permissions, ensuring platform security in the long run.

Users don't necessarily need access rights to security-sensitive accounts in their day-to-day operations. However, there are situations where this access is temporarily required. In close collaboration with customer platform administrators, Storm Reply implements a Temporary Elevated Access Management. This process allows users to temporarily acquire extended rights as needed and approved, while ensuring that these rights are revoked upon completion of the required tasks. Each Elevated Access is securely audited.