To answer this question correctly, we must reference the supported cloud platforms for Microsoft Entra Permissions Management (formerly known as CloudKnox).
1. What is Microsoft Entra Permissions Management? Microsoft Entra Permissions Management is a Cloud Infrastructure Entitlement Management (CIEM) solution. Its primary purpose is to discover, remediate, and monitor permission risks for any identity and any resource across your multi-cloud infrastructure.
2. Supported Cloud Platforms: According to the official Microsoft Entra Permissions Management documentation, the service provides comprehensive visibility and control over permissions for the following specific cloud providers:
* Microsoft Azure
* Amazon Web Services (AWS)
* Google Cloud Platform (GCP)
3. Analysis of the Options:
* Alibaba Cloud: While Microsoft Defender for Cloud (CSPM) and Azure AD (for SSO) have integrations with Alibaba Cloud, Microsoft Entra Permissions Management explicitly supports only the three major public clouds listed above (Azure, AWS, and GCP). It does not currently support Alibaba Cloud for entitlement and permission management.
* The Scenario: You have already configured it for Azure. You need to identify which additional platforms from the list (Alibaba, AWS, GCP) can be managed.
* Conclusion: Since Alibaba Cloud is not supported, the only remaining valid platforms from your list are AWS and GCP.
Reference Extract:
"Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) solution that provides comprehensive visibility into permissions assigned to all identities... across cloud infrastructures Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)."