Information Security Handbook

Authorization considerations

Authorization typically takes place within the cloud service provider's infrastructure after identification and authentication have occurred. It is very important to remember that your cloud infrastructure must be actively managed and cannot be forgotten because it is being operated and maintained by the cloud service provider. Managing authorization within the cloud infrastructure is usually a customer responsibility and will not be accomplished by the cloud service provider.