Management of access to external authorized services

A system for automatically managing access to a plurality of authorized service computing environments from a target computing environment, comprising:

• at least one processor executing a code for:
• monitoring a plurality of data sources generated by a plurality of user identities of the target computing environment accessing a plurality of service computing environments;
• analyzing the plurality of data sources to identify communication between user identities of the target computing environment and the plurality of service computing environments;
• according to the analyzing, mapping connections between the user identities of the target computing environment and the plurality of service computing environment, including connections between first user identities that are authorized to access authorized service computing environments, second user identities that are non-authorized to access the authorized service computing environments, and third user identities that are non-authorized to access non-authorized service computing environments;
• and
• automatically blocking access of the second user identities to the authorized service computing environments that they are non-authorized to access, and automatically blocking access of the third user identities to access non-authorized service computing environments.

A non-transitory medium storing program instructions for automatically managing access to a plurality of authorized service computing environments from a target computing environment, which when executed by at least one processor, cause the at least one processor to:

• monitor a plurality of data sources generated by a plurality of user identities of the target computing environment accessing a plurality of service computing environments;
• analyze the plurality of data sources to identify communication between user identities of the target computing environment and the plurality of service computing environments;
• according to the analyzing, map connections between the user identities of the target computing environment and the plurality of service computing environment, including connections between first user identities that are authorized to access authorized service computing environments, second user identities that are non-authorized to access the authorized service computing environments, and third user identities that are non-authorized to access non-authorized service computing environments;
• and
• automatically block access of the second user identities to the authorized service computing environments that they are non-authorized to access, and automatically block access of the third user identities to access non-authorized service computing environments.