{"id":557,"date":"2015-05-29T12:07:28","date_gmt":"2015-05-29T16:07:28","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=557"},"modified":"2015-05-29T12:13:36","modified_gmt":"2015-05-29T16:13:36","slug":"cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/","title":{"rendered":"Cloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds"},"content":{"rendered":"

\"The<\/a>A new report from cloud security solutions provider FortyCloud has pointed out some serious flaws in the security strategies of the top five cloud infrastructure as a service (IaaS) providers. The report, IaaS Security State of the Industry<\/em>\u00a0has found that not one of the five companies\u2014 Amazon Web Services (AWS), Rackspace, Microsoft Azure, Google Cloud Platform (GCP), and IBM Cloud\u2014 offers a native identity and access management (IAM) solution for their cloud.<\/p>\n

For the yearly report, FortyCloud<\/a>\u00a0surveyed the security features of each IaaS provider, with a specific focus on data and network security, as well as IAM.<\/p>\n

From Authentify to RSA, Solutions Review rounds up the top 24 Identity and Access Management \"SR_Identity_and_Access_Management_Buyers_Guide_Cover_350\"<\/a>solutions in the 2015 IAM Solutions Buyer’s Guide. Download your free copy today!<\/a><\/span><\/div><\/h4>\n

FortyCloud evaluated each provider for seven features: Shared cloud network, virtual private cloud (VPC) network, Firewalls, identity and access management (IAM), secure extension, secure remote access to individual servers, and remote virtual private network (VPN) access. \u00a0You can view FortyClouds comparison chart below, or get a more detailed breakdown of cloud security features from their blog post<\/a>.<\/p>\n

\"Click<\/a>

Click to Enlarge<\/p><\/div>\n

As stated above, none of the five major IaaS CSPs are currently offering native IAM solutions\u00a0though there are dozens of third party solutions available<\/a>. Microsoft’s Azure does provide dynamic client based VPN access to the cloud\u00a0but does not support identity-based access.<\/p>\n

FortyCloud adds that several CSPs do offer central-identity based access to service management consoles and APIs, but not to the cloud servers themselves.<\/p>\n

This research highlights a continued reliance by cloud IaaS providers on third-party solutions for security. We recommend that users looking for a cloud experience with more advanced platform-native security capabilities consider a platform as a service (PaaS) offering, as those products usually include some kind of role-based access management, as well as other security features.<\/p>\n

FortyClouds notes that, while the cloud IaaS market continues to grow (Gartner predicts<\/a> 38% growth in coming years), none of the leading CSP\u2019s native public cloud offerings have shown strong advances in security in the past year. FortyClouds recommends that IaaS customers augment their IaaS solutions with third-party security solutions.<\/p>\n

Research Disclaimer:<\/p>\n

It is important to note that although the completeness of security offering is an important attribute in selecting your cloud provider, other attributes like maturity, service coverage, and level of support are also important factors in such a decision. this post does not consider the latter factors.<\/i><\/p>\n

If you’re looking for more information on Cloud solutions, check out Solutions Review’s Cloud Platforms<\/a> page for cloud news, best practices, and buyer’s guides<\/a>.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

A new report from cloud security solutions provider FortyCloud has pointed out some serious flaws in the security strategies of the top five cloud infrastructure as a service (IaaS) providers. The report, IaaS Security State of the Industry\u00a0has found that not one of the five companies\u2014 Amazon Web Services (AWS), Rackspace, Microsoft Azure, Google Cloud […]<\/p>\n","protected":false},"author":24,"featured_media":344,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[6],"tags":[82,43,79,84,81,78,19,80,83],"acf":[],"yoast_head":"\nCloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds<\/title>\n<meta name=\"description\" content=\"A new report from FortyCloud highlights a lack in native IAM capabilities amongst the top five cloud IaaS providers\u2014 AWS, Google, Azure, IBM, and Rackspace\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/\",\"name\":\"Cloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/09\/The-Cloud-Will-DeFrag-the-Identity-and-Access-Management-Solutions-Market.jpg\",\"datePublished\":\"2015-05-29T16:07:28+00:00\",\"dateModified\":\"2015-05-29T16:13:36+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"description\":\"A new report from FortyCloud highlights a lack in native IAM capabilities amongst the top five cloud IaaS providers\u2014 AWS, Google, Azure, IBM, and Rackspace\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/09\/The-Cloud-Will-DeFrag-the-Identity-and-Access-Management-Solutions-Market.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/09\/The-Cloud-Will-DeFrag-the-Identity-and-Access-Management-Solutions-Market.jpg\",\"width\":600,\"height\":270,\"caption\":\"The Cloud Will DeFrag the Identity and Access Management Solutions Market\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer's Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds","description":"A new report from FortyCloud highlights a lack in native IAM capabilities amongst the top five cloud IaaS providers\u2014 AWS, Google, Azure, IBM, and Rackspace","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/","url":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/","name":"Cloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/09\/The-Cloud-Will-DeFrag-the-Identity-and-Access-Management-Solutions-Market.jpg","datePublished":"2015-05-29T16:07:28+00:00","dateModified":"2015-05-29T16:13:36+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"description":"A new report from FortyCloud highlights a lack in native IAM capabilities amongst the top five cloud IaaS providers\u2014 AWS, Google, Azure, IBM, and Rackspace","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/09\/The-Cloud-Will-DeFrag-the-Identity-and-Access-Management-Solutions-Market.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/09\/The-Cloud-Will-DeFrag-the-Identity-and-Access-Management-Solutions-Market.jpg","width":600,"height":270,"caption":"The Cloud Will DeFrag the Identity and Access Management Solutions Market"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/cloud-iaas-providers-are-seriously-lacking-iam-security-report-finds\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Cloud IaaS Providers Are Seriously Lacking IAM Security, Report Finds"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, & Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer's Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/557"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=557"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/557\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/344"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}