The problem
Access permissions can change over time and move away from the intended policy. The challenge is to spot those differences and decide which changes need remediation.
The solution
I developed an IAM drift-detection system to identify differences between intended RBAC policies and observed permissions across cloud and Kubernetes environments. The work focused on access compliance, unnecessary privileges, and remediation to support least-privilege access.
Areas of interest
Comparing observed access with an intended baseline
Identifying unnecessary permissions
Reviewing remediation and its operational impact