Cloud Identities are the secure boundary protecting all cloud resources, whether infrastructure, platform or software as a service offering. The 2023 State of the Cloud Permissions Risk Report commenting on problems common on all public clouds shares the following.

• Identities are only using 1% of granted permissions
• Workload identities are using less than 5% of their assigned permissions and that more than 80% of these accounts are inactive.
• There are on average 200+ services across cloud providers and common practices grant access to new services as they are released.

This technical discussion will cover the various types of identities used in public cloud including use cases, common misconfigurations and how they are exploited. Key takeaways include best practice implementation, understanding how to monitor and govern identities in Azure, and security tooling.