Managing Identities and Entitlements to Mitigate Cloud Security Risks