Inheriting security risks for cloud entities in a cloud computing system

A computer-implemented method for reducing risky activity in a computer networking environment, the computer-implemented method comprising:

• generating a first user risk score associated with a first cloud identifier of a first user in response to a sign-in event;
• determining that the first user risk score satisfies a risky user threshold;
• detecting a cloud entity propagation event associated with the first cloud identifier, the cloud entity propagation event involving creation of a new cloud entity having a second cloud identifier;
• and
• based on identifying the cloud entity propagation event and the first user risk score satisfying the risky user threshold, assigning the first user risk score of the first cloud identifier to the second cloud identifier of the new cloud entity.

A system for reducing risky activity in a cloud computing system, the system comprising:

• a processing system;
• and
• a computer memory comprising instructions that, when executed by the processing system, cause the system to perform operations of:
• generating a first user risk score associated with a first cloud identifier of a first user in response to a sign-in event of the first user to the cloud computing system;
• determining that the first user risk score satisfies a risky user threshold;
• detecting a cloud entity propagation event associated with the first cloud identifier, the cloud entity propagation event involving assignment of roles of the first cloud identifier to a cloud entity having a second cloud identifier;
• and
• based on identifying the cloud entity propagation event and the first user risk score satisfying the risky user threshold, assigning the first user risk score of the first cloud identifier to the second cloud identifier of the cloud entity.