Most organizations don’t have full visibility into what users can do in their cloud environment. They don’t know who can assume other identities to escalate privileges or which permissions they’d be able to achieve. The dynamic nature of cloud environments makes it difficult for organizations to stay informed on what these new services are, how they work, and what the implications are for permissions to various resources in the cloud. By learning who has which permissions, a business can address the risk before a data breach or another security incident happens.”]
Source: https://www.darkreading.com/cloud/do-you-know-who-s-lurking-in-your-cloud-environment-