A Zero Trust-Based Identity and Access Management Framework for Cross-Cloud Federated Networks
Srinivas Potluri · International Journal of Emerging Research in Engineering and Technology · 2024
Multi-cloud and hybrid environments are gradually becoming a part of companies that are increasingly using the enterprise cloud. Ensuring unified Identity and Access Management (IAM) throughout distributed platforms proves to be a significant challenge, which demands secure management. Conventional IAM systems, which are usually anchored on perimeter-based frameworks, do not accommodate the dynamics of the federated identity, interoperability of trusts, and dynamic access in a cross-cloud environment. In the proposed paper, the researcher suggests designing a detailed Zero Trust architecture for IAM in cross-cloud federated networks. The framework combines strategies aimed at integrating federated identity providers (IdPs), Policy Enforcement Points (PEPs), and Policy Decision Points (PDPs) with a centralized trust broker stratum which allows continuous authentication, switching policies, and policy decision points. Through the utilization of Zero Trust Architecture (ZTA), it is presumed that the proposed model does not trust anything and that every access request needs to be authenticated, authorized, and encrypted, no matter its source. The system will use trust score computation, behavioural modelling and Multi-Factor Authentication (MFA) to implement least-privilege access to cloud providers like AWS, Azure and Google Cloud. Cross-cloud testbed and a prototype implementation show enhanced performance as compared to traditional IAM models, such as limited access latency, increased breach resistance, and lower authorization failure rates. The effectiveness of the framework to prevent identity spoofing, lateral movement, and unauthorized access and retain compliance and scalability is confirmed by experimental results. The architecture below is the proposed architecture of a progressive IAM solution to secure contemporary, federated cloud environments