Permission Management

Permission management in the cloud controls the actions an identity can perform, the resources it can access, and the conditions for that access. Proper permission settings prevent unauthorized access and protect cloud assets and data. The core principle of cloud permission management is least privilege. This principle dictates that you grant only the minimum permissions required for an identity to perform its tasks. The following best practices on Alibaba Cloud are based on this principle.

Best practices

• Grant permissions based on the principle of least privilege

• Periodically review permissions to ensure least privilege

• Set permission boundaries

• Periodically review public and cross-account access

• Securely share resources within an organization

• Securely share resources with third parties