KT Cloud Platform IAM: From Account Management to Sophisticated Security Governance

As cloud operating environments become more complex, simple account-centric permission management has revealed limitations in tracking security and accountability. KT Cloud Platform has introduced a precise access control system based on Organization, Project, and Resource structures to address these issues.

Unlike the traditional single account (Root Account) structure, KT Cloud Platform separates operational units into organizations and projects and applies the RBAC (Role-Based Access Control) model. Instead of granting permissions directly to users, it implements the principle of least privilege by encapsulating permissions in roles and assigning those roles to users or groups. Additionally, by combining system-defined roles (such as ADMIN, READER) with user-defined roles, it enables the configuration of a granular permission hierarchy tailored to specific business scopes.

In terms of authentication security, it supports MFA (Multi-Factor Authentication) and IP-based access control. For public sector customers, SMS OTP-based MFA is mandatory when creating IAM users, while general customers can choose whether to enable MFA on a per-user basis. This reduces the risk of unauthorized access and provides security governance that structurally clarifies who has access to what.