Articles | Open Access | https://doi.org/10.55640/ijiot-06-09-01

A Zero-Trust Framework for Automated Protection of Non-Human Identities in Cloud IAM

Minh Nguyen , Faculty of Information Technology, Vietnam Institute of Advanced Computing, Vietnam

Abstract

The rapid adoption of cloud-native applications, automation pipelines, artificial intelligence services, containers, serverless workloads, and machine-to-machine communication has substantially increased the number and operational importance of non-human identities (NHIs). Unlike human identities, NHIs frequently operate continuously, interact across distributed environments, and may possess permissions that are difficult to observe, evaluate, and revoke dynamically. Consequently, conventional identity and access management approaches based primarily on static credentials and manually administered permissions are insufficient for highly automated cloud environments. This research proposes a Zero-Trust Framework for Automated Protection of Non-Human Identities in Cloud IAM. The study follows a conceptual research-and-review methodology based exclusively on the supplied literature and synthesizes principles from automated governance, distributed computing, machine learning, optimization, DataOps, IoT, and cyber-physical systems. The proposed framework combines continuous identity discovery, contextual authentication, least-privilege authorization, behavioral monitoring, risk scoring, automated credential governance, policy optimization, and continuous revocation. The analysis indicates that NHI protection should be treated as a continuously optimized governance process rather than a one-time access-control configuration. The framework further establishes a feedback mechanism through which observed identity behavior can influence future authorization decisions. The research contributes a structured conceptual architecture for integrating Zero Trust principles with automated NHI lifecycle management and identifies implementation challenges involving policy complexity, false positives, interoperability, explainability, and operational scalability.

Keywords

Zero Trust, Non-Human Identities, Cloud IAM, Identity Governance

References

Almeida, V. N. D., et al. (2024). “Knowledge Transfer in Multi-objective Multi-agent Reinforcement Learning via Generalized Policy Improvement,” Computer Science and Information Systems, vol. 21, no. 1, pp. 335–362.

Bahaa, S., et al. (2023). “DataOps Lifecycle with a Case Study in Healthcare,” International Journal of Advanced Computer Science and Applications, vol. 14, no. 1, pp. 136–144.

El Faydy, N., and El Abbadi, L. (2023). “Interpretive Structural Modelling of Critical Success Factor for Lean Product Lifecycle Management in Industry 4.0,” International Journal of Production Management and Engineering, vol. 11, no. 1, pp. 65–72.

Gligor, A., et al. (2025). “Augmented Cyber-Physical Model for Real-Time Smart-Grid Co-Simulation,” International Journal of Computers Communications & Control, vol. 20, no. 1, p. 6914.

Hamdi, M., et al. (2024). “Deep Recurrent Neural Networks Distributed on a Hadoop/Spark Cluster for Fall Detection,” International Journal of Computers Communications & Control, vol. 19, no. 3, p. 6428.

Han, L. N., et al. (2023). “Balancing Material Supply-Demand with ARIMA and Neural Networks,” International Journal of Simulation Modelling, vol. 22, no. 4, pp. 712–722.

Li, Z., and Yao, M. (2024). “Optimized Test Case Design for Automotive Safety Driving Virtual Training System Using Formal Activity Diagrams,” Tehnički vjesnik – Technical Gazette, vol. 31, no. 6, pp. 2014–2021.

Li, S., et al. (2024). “Factoring Electrochemical and Full-Lifecycle Aging Modes of Battery Participating in Energy and Transportation Systems,” IEEE Transactions on Smart Grid, vol. 15, no. 5, pp. 4932–4945.

Liu, Y., et al. (2023). “Deep Learning for Intelligent Production Scheduling Optimization,” International Journal of Simulation Modelling, vol. 23, no. 1, pp. 172–183.

Liu, Z., et al. (2024). “A Hybrid CNN and LSTM Based Model for Financial Crisis Prediction,” Tehnički vjesnik – Technical Gazette, vol. 31, no. 1, pp. 185–192.

Montoya, G. A., et al. (2025). “A Mathematical Optimization Approach for Prioritized Services in IoT Networks for Energy-Constrained Smart Cities,” International Journal of Computers Communications & Control, vol. 20, no. 1, p. 6912.

Motiejauskas, M., and Dzemyda, G. (2024). “EfficientNet Convolutional Neural Network with Gram-Matrices Modules for Predicting Sadness Emotion,” International Journal of Computers Communications & Control, vol. 19, no. 5, p. 6697.

Raska, P., et al. (2024). “Using Adaptive Neural Networks for Optimising Discrete Event Simulation,” International Journal of Simulation Modelling, vol. 23, no. 2, pp. 227–238.

Sun, H. (2023). “Optimizing Manufacturing Scheduling with Genetic Algorithm and LSTM Neural Networks,” International Journal of Simulation Modelling, vol. 22, no. 3, pp. 508–519.

Wen, T. (2024). “A Multi-feature Fusion Model Based on Long and Short Term Memory Network and Improved Artificial Bee Colony Algorithm for English Text Classification,” Computer Science and Information Systems, vol. 21, no. 4, pp. 1607–1627.

Yang, X., et al. (2024). “Vehicle Driving Behavior Recognition and Optimization Strategies Based on Cloud Computing and SSA-BP Algorithm,” Studies in Informatics and Control, vol. 33, no. 3, pp. 17–28.

Yu, J., et al. (2024). “News Recommendation Model Based on Encoder Graph Neural Network and BAT Optimization in Online Social Multimedia Art Education,” Computer Science and Information Systems, vol. 21, no. 3, pp. 989–1012.

Zhang, X., et al. (2024). “A Novel Industrial Big Data Fusion Method Based on Q-learning and Cascade Classifier,” Computer Science and Information Systems, vol. 21, no. 4, pp. 1629–1649.

Ganapathy, S. K. (2025). “Automated Governance and Protection of Non-Human Identities in Cloud IAM,” Frontiers in Emerging Computer Science and Information Technology, vol. 2, no. 2, pp. 08–20. Available at: https://irjernet.com/index.php/fecsit/article/view/cloud-iam-non-human-identities.

Article Statistics

Downloads

Download data is not yet available.

Copyright License

Download Citations

How to Cite

Minh Nguyen. (2026). A Zero-Trust Framework for Automated Protection of Non-Human Identities in Cloud IAM. International Journal of IoT, 6(09), 1-9. https://doi.org/10.55640/ijiot-06-09-01