Hardening of cloud security policies

A non-transitory computer readable medium having stored thereon instructions for causing processing circuitry to execute a process for hardening cloud security policies of a cloud computing platform, the process comprising:

• gathering cloud activity logs from at least the cloud computing platform, wherein the cloud computing platform includes a plurality of cloud entities;
• gathering a plurality of cloud security policies provisioned to protect the cloud entities;
• for each of the plurality of cloud security policies, generating a permission usage map within the cloud computing platform, wherein the permission usage map represents the permissions granted to each cloud entity and the permissions used by each cloud entity;
• analyzing the permission usage map to discover at least one hardening gap, wherein each hardening gap is at least a difference between permissions granted and permissions used by a cloud entity;
• for each discovered hardening gap, computing a risk score designating a potential risk reduction achieved by addressing the hardening gap;
• generating at least one hardening recommendation for the at least one hardening gap and its respective computed risk score;
• and
• applying the at least one hardening recommendation to the respective cloud security policy, thereby hardening the cloud computing platform.

A system for causing processing circuitry to execute a process for hardening cloud security policies of a cloud computing platform, the system comprising:

• a processing system;
• and
• a memory, the memory containing instructions that, when executed by the processing system, configure the system to:
• gather cloud activity logs from at least the cloud computing platform, wherein the cloud computing platform includes a plurality of cloud entities;
• gather plurality of cloud security policies provisioned to protect the cloud entities;
• for each of the plurality of cloud security policies, generating a permission usage map within the cloud computing platform, wherein the permission usage map represents the permissions granted to each cloud entity and the permissions used by each cloud entity;
• analyze the permission usage map to discover at least one hardening gap, wherein each hardening gap is at least a difference between permissions granted and permissions used by a cloud entity;
• for each discovered hardening gap, compute a risk score designating a potential risk reduction achieved by addressing the hardening gap;
• generate at least one hardening recommendation for the at least one hardening gap and its respective computed risk score;
• and
• applying the at least one hardening recommendation to the respective cloud security policy, thereby hardening the cloud computing platform.