Skyhawk Synthesis Security Platform's Cloud Infrastructure Entitlement Management (CIEM) module manages permissions, users, groups, and roles across cloud environments. The platform takes a full inventory of all permissions and policies connected to users, groups, and roles. It identifies both used and unused permissions, enabling security teams to assess cloud exposure and risk. Unused permissions can then be safely removed to reduce the overall attack surface. Key capabilities include: - Automated identification of unused permissions across cloud identities - Insight-driven, automated creation of new permission policies to reduce attack surface without impacting employee productivity - Right-sizing of permissions to minimize unnecessary access The CIEM module is part of the broader Skyhawk Synthesis platform, which combines Cloud Security Posture Management (CSPM), CIEM, and Cloud Detection and Response (CDR) into a single platform. The CDR component contextualizes and correlates attack vectors in real time, providing scored and validated alerts with remediation guidance.