Identity & Access across clouds
Account-level identity foundations - roles, workload identities and the guardrails each cloud expects you to set once, before anything else lands.
12 verified modules, 4 of them live-tested apply→verify→destroy; the rest are static-validated, live-test pending.
Compare by provider
| Provider | Module | Verification |
|---|---|---|
| Alibaba Cloud | A RAM Role a Service May Assume, with a Custom Policy and an Hour-Long Session | static-validated |
| AWS | IAM Roles, Policies & OIDC Trust | ✓ live-tested |
| Azure | Entra ID Workload Identity Baseline | ✓ live-tested |
| Azure | User-Assigned Managed Identities | ✓ live-tested |
| Exoscale | An IAM Role that Denies by Default, Allows by Rule, with a Bound API Key | static-validated |
| Google Cloud | Service Accounts & IAM Bindings | ✓ live-tested |
| Huawei Cloud | An IAM Agency a Service Assumes, with Roles Scoped to Projects | static-validated |
| IBM Cloud | A Trusted Profile with Scoped Policies and the Compute Resources that May Assume It | static-validated |
| Oracle Cloud | OCI IAM Foundation (compartments + policies) | static-validated |
| OVHcloud | A Policy That Cannot Quietly Grant and Forbid Nothing | static-validated |
| Scaleway | An IAM Application with a Project-Scoped Policy and an API Key that Expires | static-validated |
| Tencent Cloud | A CAM Role a Service May Assume, No Console Login, with a Custom Policy | static-validated |
How to choose
There is little portability here: each cloud models identity its own way, so pick the module for the cloud you are landing in rather than a favourite. Everywhere it is offered, prefer a workload identity (service account, managed identity) over a long-lived key - it is the single change that removes the most credential risk.
When not to use
These are foundations, not an identity programme. They do not federate your workforce directory, run access reviews, or manage human joiners and leavers.
Other solutions
Managed Relational Database25Secrets & Key Management23DNS & Traffic Management23Messaging & Pub/Sub22Load Balancer21Virtual Machines21Virtual Private Cloud (VPC)19Cloud Firewall17Managed Kubernetes16Object Storage16Block Storage16Golden Images14Container Registry12In-Memory Cache12Shared File Storage11Managed NoSQL Database11Serverless Functions10CDN & Edge Delivery10WAF & Edge Security10NAT Gateway10Serverless Containers9Monitoring & Observability9Managed Search9Static Site Hosting9Managed TLS Certificates9Network Peering9Audit Log Retention9Cloud Data Warehouse9API Gateway8Site-to-Site VPN8Dedicated Interconnect8Backup Service8Managed CI/CD8Transit Hub8Managed Spark8Network Flow Logs8Security Posture & Findings7Database Migration & CDC7Managed Network Firewall7Private Instance Access7Organisation Guardrails7Private Service Endpoints7Private Certificate Authority6Managed ML Platform6Transactional Email6Managed App Platform6Customer Identity6Uptime Checks6Landing Zone6Budgets & Cost Alerts5Patch Management5Managed ETL Pipelines4Workflow Orchestration4HPC Parallel File Systems4Managed BI4Data Transfer Service3Managed Active Directory3Zero Trust Application Access3Sensitive Data Discovery3