[](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Cortex Cloud logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/cortexcloud-logo-dark.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [行业报告](https://www.paloaltonetworks.com/cortex/cloud/analysts-reports?ts=markdown)

* 用例  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 用例  
  用例
  
  * [Cortex Cloud](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)  
    由统一数据、AI 和自动化提供助力的实时云安全
  * [应用安全](https://www.paloaltonetworks.cn/cortex/cloud/application-security?ts=markdown)  
    从源头阻止风险
  * [云态势安全](https://www.paloaltonetworks.cn/cortex/cloud/cloud-posture-security?ts=markdown)  
    快速确定任何云中的风险优先级并进行补救
  * [云运行时安全](https://www.paloaltonetworks.cn/cortex/cloud/runtime-security?ts=markdown)  
    实时预防云攻击
  * [安全运营](https://www.paloaltonetworks.cn/cortex?ts=markdown)  
    检测、调查和应对整个企业和云中的威胁

* 解决方案  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 解决方案  
  [应用安全](https://www.paloaltonetworks.cn/cortex/cloud/application-security?ts=markdown)
  
  * [应用安全态势管理 (ASPM)](https://www.paloaltonetworks.cn/cortex/cloud/application-security-posture-management?ts=markdown)
  * [软件供应链安全](https://www.paloaltonetworks.cn/cortex/cloud/software-supply-chain-security?ts=markdown)
  * [IaC 安全](https://www.paloaltonetworks.cn/cortex/cloud/infrastructure-as-code-security?ts=markdown)
  * [软件构成分析](https://www.paloaltonetworks.cn/cortex/cloud/software-composition-analysis?ts=markdown)
  * [机密安全](https://www.paloaltonetworks.cn/cortex/cloud/secrets-security?ts=markdown)
  * [开放合作伙伴生态系统](https://www.paloaltonetworks.cn/cortex/cloud/appsec-partner-ecosystem?ts=markdown)  
    [云态势安全](https://www.paloaltonetworks.cn/cortex/cloud/cloud-posture-security?ts=markdown)
  * [云安全态势管理 (CSPM)](https://www.paloaltonetworks.cn/cortex/cloud/cloud-security-posture-management?ts=markdown)
  * [云基础架构权限管理 (CIEM)](https://www.paloaltonetworks.cn/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown)
  * [数据安全态势管理 (DSPM)](https://www.paloaltonetworks.cn/cortex/cloud/data-security-posture-management?ts=markdown)
  * [AI 安全态势管理 (AI-SPM)](https://www.paloaltonetworks.cn/cortex/cloud/ai-security-posture-management?ts=markdown)
  * [漏洞管理](https://www.paloaltonetworks.cn/cortex/cloud/vulnerability-management?ts=markdown)
  * [云攻击面管理 (ASM)](https://www.paloaltonetworks.cn/cortex/cloud/attack-surface-management?ts=markdown)  
    [云运行时安全](https://www.paloaltonetworks.cn/cortex/cloud/runtime-security?ts=markdown)
  * [云检测与响应 (CDR)](https://www.paloaltonetworks.cn/cortex/cloud-detection-and-response?ts=markdown)
  * [容器和 Kubernetes 安全](https://www.paloaltonetworks.cn/cortex/cloud/container-security?ts=markdown)
  * [云工作负载保护 (CWP)](https://www.paloaltonetworks.cn/cortex/cloud/cloud-workload-protection?ts=markdown)
  * [API 安全](https://www.paloaltonetworks.cn/cortex/cloud/api-security?ts=markdown)
  * [Web 应用安全](https://www.paloaltonetworks.cn/cortex/cloud/web-application-security?ts=markdown)  
    [安全运营](https://www.paloaltonetworks.cn/cortex/?ts=markdown)
  * [Cortex XSIAM](https://www.paloaltonetworks.cn/cortex/cortex-xsiam?ts=markdown)
  * [Cortex XDR](https://www.paloaltonetworks.cn/cortex/cortex-xdr?ts=markdown)
  * [Cortex XSOAR](https://www.paloaltonetworks.cn/cortex/cortex-xsoar?ts=markdown)
  * [Cortex Xpanse](https://www.paloaltonetworks.cn/cortex/cortex-xpanse?ts=markdown)
  * [Unit 42 托管检测和响应](https://www.paloaltonetworks.cn/cortex/managed-detection-and-response?ts=markdown)

* [产品之旅](https://www.paloaltonetworks.com/cortex/cloud/product-tours?ts=markdown)

* 资源  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 资源  
  学习
  
  * [博客](https://www.paloaltonetworks.com/blog/cloud-security/?lang=zh-hans)
  * [云研究](https://www.paloaltonetworks.com/cortex/cloud/research)
  * [Cyberpedia](https://www.paloaltonetworks.cn/cyberpedia?ts=markdown)
  * [Live Community](https://live.paloaltonetworks.com/)
  * [互动研讨会](https://www.paloaltonetworks.com/cortex/cloud/interactive-workshops)  
    产品信息
  * [技术文档](https://docs.paloaltonetworks.com/)
  * [开源项目](https://www.paloaltonetworks.com/cortex/cloud/open-source-projects)
  * [支持](https://support.paloaltonetworks.com/Support/Index)  
    资源
  * [技术合作伙伴](https://www.paloaltonetworks.com/partners/technology-partners)
  * [客户成功案例](https://www.paloaltonetworks.cn/customers?ts=markdown)
  * [资源中心](https://www.paloaltonetworks.cn/resources?ts=markdown)
  * [事件](https://events.paloaltonetworks.com)

* 

* [申请演示](https://www.paloaltonetworks.cn/cortex/cloud/trial?ts=markdown)  
  ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg)  
  [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
  搜索  
  Close search modal

*** ** * ** ***

CORTEX CLOUD

# 云基础架构权限管理

治理从人类用户到 AI 智能体的驱动云的每一个身份。

* [申请演示](https://www.paloaltonetworks.cn/cortex/cloud/demo?ts=markdown)  
  ![Dashboard](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/ciem-dashboard-hero.png)  
  ![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg)  
  ![Dashboard](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/ciem-dashboard-hero.png)

## 建议

\[![利用 CIEM 征服云身份混乱](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/2-1_180x180.jpg)

### 利用 CIEM 征服云身份混乱

数据表\](https://www.paloaltonetworks.com/resources/datasheets/cortex-cloud-ciem)  
\[![gigaom](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/2-2_180x180.jpg)

### Cortex Cloud 在 2026 GigaOm Radar for CIEM 中被评为领导者。

立即阅读\](https://www.paloaltonetworks.com/blog/cloud-security/gigaom-radar-ciem-cortex-cloud-leader-2026/)  
\[![利用 Cortex Cloud 将身份打造为云安全的控制平面](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/2-3_180x180.jpg)

### 利用 Cortex Cloud 将身份打造为云安全的控制平面

锁定名额\](https://www.paloaltonetworks.com/resources/webcasts/making-identity-the-control-plane-of-cloud-security-with-cortex-cloud)  
\[![Transforming Posture Security for the Modern Cloud Stack](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/2-4_180x180.jpg)

### 为现代云堆栈转变姿态安全

立即阅读\](https://www.paloaltonetworks.com/resources/whitepapers/posture-security-modern-cloud-stack)  
解决方案 用例 演示 资源  
[解决方案](#solution)  
[用例](#use-cases)  
[演示](#demo)  
[资源](#resources)  
{#solution} SOC 解决方案

## 控制跨人、机器和智能体身份的访问风险。

![掌握身份控制平面](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/3-icon_1.svg)

### 掌握身份控制平面

从管理"用户"转变为管理跨工作负载、数据和服务的整个身份控制平面。  
![降低始终在线身份带来的风险](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/3-icon_2.svg)

### 降低始终在线身份带来的风险

那些持续运行、缺乏 MFA 的安全服务账户、机器人、自动化程序及 AI 智能体，正在不断扩大云环境的攻击面。  
![阻止攻击者利用的访问路径](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/3-icon_3.svg)

### 阻止攻击者利用的访问路径

优先处理有害组合、过多的权限以及访问敏感数据和核心资源的隐藏路径。  
{#capabilities} {#use-cases}  
用例

### 阻止过度访问演变成攻击途径

[![NET-EFFECTIVE PERMISSIONS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-1.jpg)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-1.jpg?ts=markdown)  
净有效权限

### 了解谁可以对哪些资源采取哪些行动

别再瞎猜了。Cortex^®^ Cloud^™^ 可解码嵌套策略和跨账户角色，从而揭示身份在 AWS、Azure、Google Cloud 和 OCI 中的实际有效权限。  
[![NONHUMAN IDENTITY RISK](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-2.jpg)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-2.jpg?ts=markdown)  
非人类身份风险

### 管理新一代身份

保障高风险服务账户、机器人和令牌的安全，其数量远超人类。监控那些未启用 MFA 且从不注销的身份的活动，并强制执行治理策略  
[![LEAST PRIVILEGE ENFORCEMENT](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-3.jpg)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-3.jpg?ts=markdown)  
实施最小权限原则

### 自信地强制执行最小权限原则

停止权限滥用。利用人工智能驱动的分析，自信地移除未使用的权限，实现最小权限原则，同时不会中断生产或开发人员的工作流程。  
[![ATTACK PATH ANALYSIS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-4.jpg)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/5-4.jpg?ts=markdown)  
攻击路径分析

### 阻止向核心资产的横向移动

像攻击者一样思考。直观呈现身份如何进行横向移动或权限提升，从而让您在攻击者利用这些路径之前，提前切断通往敏感数据的通道  
网络研讨会  
![webinar](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/6_248x231.jpg)  
利用 Cortex Cloud 将身份打造为云安全的控制平面  
[锁定名额](https://www.paloaltonetworks.com/resources/webcasts/making-identity-the-control-plane-of-cloud-security-with-cortex-cloud)  
{#demo}

## 亲身体验

###### 了解如何使用 Cortex Cloud 合理配置云权限。

{#resources}

## 值得信赖的专家资源

[查看全部](https://www.paloaltonetworks.cn/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fcortex-cloud&ts=markdown)  
\[博客

### Cortex Cloud 在 2026 GigaOm Radar for CIEM 中被评为领导者和表现优异者

![blog](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/8_1.png)\](https://www.paloaltonetworks.com/blog/cloud-security/gigaom-radar-ciem-cortex-cloud-leader-2026/)  
\[白皮书

### 为现代云堆栈转变姿态安全

![WHITE PAPER](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/8_2.jpg)\](https://www.paloaltonetworks.com/resources/whitepapers/posture-security-modern-cloud-stack)  
\[提示说明

### 防止过度授予云权限

![TIP SHEET](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortexcloud/ciem/8_3.jpg)\](https://www.paloaltonetworks.com/resources/datasheets/tip-sheet-prevent-over-privileged-cloud-entitlements)  
PrevNext  
{#footer} 产品和服务

* [实时人工智能驱动的网络安全](https://www.paloaltonetworks.cn/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.cn/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.cn/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.cn/sase/ai-access-security?ts=markdown)

* [云交付的安全服务](https://www.paloaltonetworks.cn/network-security/security-subscriptions?ts=markdown)

* [高级威胁预防](https://www.paloaltonetworks.cn/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.cn/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.cn/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.cn/network-security/advanced-dns-security?ts=markdown)

* [企业数据丢失防护](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.cn/network-security/enterprise-iot-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.cn/network-security/medical-device-security?ts=markdown)

* [工业 OT 安全](https://www.paloaltonetworks.cn/network-security/industrial-ot-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown)

* [新一代防火墙](https://www.paloaltonetworks.cn/network-security/next-generation-firewall?ts=markdown)

* [硬件防火墙](https://www.paloaltonetworks.cn/network-security/hardware-firewall-innovations?ts=markdown)

* [软件防火墙](https://www.paloaltonetworks.cn/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.cn/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.cn/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.cn/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.cn/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.cn/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.cn/sase?ts=markdown)

* [应用加速](https://www.paloaltonetworks.cn/sase/app-acceleration?ts=markdown)

* [自主数字体验管理](https://www.paloaltonetworks.cn/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.cn/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.cn/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.cn/sase/sd-wan?ts=markdown)

* [远程浏览器隔离](https://www.paloaltonetworks.cn/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown)

* [基于 AI 的安全运营平台](https://www.paloaltonetworks.cn/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.cn/cortex/cloud/application-security?ts=markdown)

* [云态势安全](https://www.paloaltonetworks.cn/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.cn/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.cn/prisma/cloud?ts=markdown)

* [人工智能驱动的 SOC](https://www.paloaltonetworks.cn/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.cn/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.cn/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.cn/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.cn/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 托管检测和响应](https://www.paloaltonetworks.cn/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.cn/cortex/managed-xsiam?ts=markdown)

* [新一代身份安全](https://www.paloaltonetworks.cn/idira?ts=markdown)

* [特权访问管理](https://www.paloaltonetworks.cn/idira/human/privileged-access-management?ts=markdown)

* [身份和访问管理](https://www.paloaltonetworks.cn/idira/human/identity-and-access-management?ts=markdown)

* [端点特权管理器](https://www.paloaltonetworks.cn/idira/human/endpoint-privilege-manager?ts=markdown)

* [身份监管](https://www.paloaltonetworks.cn/idira/human/identity-governance?ts=markdown)

* [工作人员密码管理](https://www.paloaltonetworks.cn/idira/human/workforce-password-management?ts=markdown)

* [智能体身份](https://www.paloaltonetworks.cn/idira/agentic?ts=markdown)

* [机密管理](https://www.paloaltonetworks.cn/idira/machine/secrets-management?ts=markdown)

* [统一机密监管](https://www.paloaltonetworks.cn/idira/machine/unified-secrets-governance?ts=markdown)

* [应用程序凭证交付](https://www.paloaltonetworks.cn/idira/machine/application-credentials-delivery?ts=markdown)

* [供应商特权访问](https://www.paloaltonetworks.cn/idira/human/vendor-privileged-access?ts=markdown)

* [威胁情报和事件响应服务](https://www.paloaltonetworks.cn/unit42?ts=markdown)

* [主动评估](https://www.paloaltonetworks.cn/unit42/assess?ts=markdown)

* [事件响应](https://www.paloaltonetworks.cn/unit42/respond?ts=markdown)

* [转变您的安全策略](https://www.paloaltonetworks.cn/unit42/transform?ts=markdown)

* [发现威胁情报](https://www.paloaltonetworks.cn/unit42/threat-intelligence-partners?ts=markdown)  
  公司

* [关于我们](https://www.paloaltonetworks.cn/about-us?ts=markdown)

* [人才招聘](https://jobs.paloaltonetworks.com/en/)

* [联系我们](https://www.paloaltonetworks.cn/company/contact-sales?ts=markdown)

* [企业责任](https://www.paloaltonetworks.com/about-us/corporate-responsibility)

* [客户](https://www.paloaltonetworks.cn/customers?ts=markdown)

* [投资者关系](https://investors.paloaltonetworks.com/)

* [位置](https://www.paloaltonetworks.com/about-us/locations)

* [新闻资讯](https://www.paloaltonetworks.cn/company/newsroom?ts=markdown)  
  热门链接

* [博客](https://www.paloaltonetworks.com/blog/?lang=zh-hans)

* [社区](https://www.paloaltonetworks.com/communities)

* [内容库](https://www.paloaltonetworks.cn/resources?ts=markdown)

* [网络百科](https://www.paloaltonetworks.com/cyberpedia)

* [事件中心](https://events.paloaltonetworks.com/)

* [管理电子邮件首选项](https://start.paloaltonetworks.com/preference-center)

* [产品清单](https://www.paloaltonetworks.cn/products/products-a-z?ts=markdown)

* [产品认证](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance)

* [报告漏洞](https://www.paloaltonetworks.com/security-disclosure)

* [网站地图](https://www.paloaltonetworks.cn/sitemap?ts=markdown)

* [技术文档](https://docs.paloaltonetworks.com/)

* [Unit 42](https://unit42.paloaltonetworks.com/)

* [请勿出售或分享我的个人信息](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)

* [隐私](https://www.paloaltonetworks.com/legal-notices/privacy)

* [信任中心](https://www.paloaltonetworks.com/legal-notices/trust-center)

* [使用条款](https://www.paloaltonetworks.com/legal-notices/terms-of-use)

* [文档](https://www.paloaltonetworks.com/legal)

版权所有 © 2026 Palo Alto Networks。保留所有权利

* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/)
* CN  
  Select your language