// GLOSSARY

IAM (Identity and Access Management)

IAM, Identity and Access Management, is the control domain for the question of who can access what, under which conditions, on cloud providers. AWS IAM roles and policies, Azure Entra ID and GCP service accounts are established forms of this domain. The weight of this concept comes from a historical shift in the attack surface: traditional security protected the network perimeter, where the inside was safe and the outside dangerous. With cloud and remote work that perimeter dissolved; what now determines access to a resource is not position on the network but the authority carried by an identity. So the modern attacker's real target is not breaching a firewall but seizing a valid identity or exploiting a weakly configured permission. IAM is therefore not a side heading but the main battleground of cloud security; concepts such as effective permissions, the privilege chain and non-human identity all operate within this domain. As an established English acronym, it is preserved in Turkish copy.