Identity Centric Cloud Security

Abstract

Cloud computing’s inherent scalability and flexibility necessitate robust Identity and Access Management (IAM) systems to ensuresecure access to resources. This paper focuses on developing an identity-centric cloud security framework, with the primarygoal of streamlining user authentication and access control. The project involved integrating Zendesk with the AWS console andimplementing Single Sign-On (SSO) based on Role-Based Access Control (RBAC). AWS Cognito was employed to manage useridentities, enabling secure authentication and authorization, while distinct roles (admin and basic) were defined to enforce granularaccess permissions. The implemented system successfully demonstrates secure user authentication and the effective use of RBACto control resource access. By leveraging AWS services, the architecture provides scalability and facilitates real-time monitoringthrough CloudWatch, enhancing the ability to detect and respond to security incidents. The findings underscore the importance ofan identity-centric security model in cloud environments and highlight the benefits of centralized identity management. The paperemphasizes the necessity of robust authentication and authorization mechanisms to secure cloud-based applications. The studyadvocates for the adoption of Identity Providers (IdPs) like AWS Cognito, which offer scalable and secure solutions for managinguser identities. Furthermore, it recommends the careful definition of roles and permissions aligned with organizational securitypolicies and continuous monitoring to maintain a strong security posture in the cloud.