The content provided is only for informational purposes and is not intended to be directly applied to a production system. Those individuals who leverage this information should place it into a development and test environment prior to production. Within dev and test, the implementation can be verified and validated against a structured test plan with organizational specific requirements.
Identity and Access Management (IdAM) | CAC | Privileged Access to the Management Plane
DoD Cloud SRG Definition
• Mission Owner privileged user access to their systems and applications instantiated on IaaS/PaaS for the purpose of administration and maintenance.
• Translation: CAC authentication is required for privileged user access to the management plane. The DoD Secure Cloud Computing Architecture (SCCA) depicts a separate, logical management plane for privileged users (e.g., sys admins, DBAs, security engineers, IA analysts, etc.) These user accounts are privileged because they have permissions that exceed the normal end user which they use to monitor and administer the system.
In the process of migrating this data. Check back soon for updates.
Have suggestions for cloud security issues you want to know more about?
Maybe we have an answer. Let us know below.