Human access is periodically reviewed because it maps to employment. Non-human identity maps to projects, and projects end without their credentials being retired.
How cross-tenant paths form
- An integration authenticates to two platforms with independent privilege in each
- A token issued for a narrow task retains a broader scope than the task required
- Automation runs with an administrative role because narrower roles were never defined
- Token
- Integration
- Second Tenant
- Sensitive Records
Each hop validated by successful exploitation
Making paths visible
Access inventories describe grants. Adversarial testing establishes reach: whether a specific credential, used as an adversary would use it, actually retrieves the data at the end of the path.
Tags
- identity
- oauth
- service accounts
- saas