# Cloud identity and access checklist worksheet

Adapt this planning resource to your environment. Examples are illustrative, not completed checks. Do not record secrets.

- Service / scope:
- Accountable owner:
- Reviewer:
- Environment / version:
- Review date:
- Approval / change reference:
- Next review trigger:

## Inventory identities and trust paths

- [ ] List employees, guests, service accounts, application identities and supplier access.
- Environment-specific action:
- Expected result / stop condition:
- Observed result and evidence:
- Owner / due date:

## Reduce standing privilege deliberately

- [ ] Assign the smallest role and resource scope needed for the job.
- Environment-specific action:
- Expected result / stop condition:
- Observed result and evidence:
- Owner / due date:

## Design emergency access and authentication

- [ ] Use strong authentication for privileged access and keep recovery methods protected.
- Environment-specific action:
- Expected result / stop condition:
- Observed result and evidence:
- Owner / due date:

## Review, revoke and verify

- [ ] Set a recurring access review with an accountable service owner.
- Environment-specific action:
- Expected result / stop condition:
- Observed result and evidence:
- Owner / due date:

## Closure

- Outcome: not started / pass / partial pass / fail
- Exceptions, owner and due date:
- Acceptance / approval:
- Follow-up and cleanup:

Source article: https://happysysadm.com/cloud-administration/cloud-identity-access-checklist/