# Cloud identity, IAM and RBAC · Scope and trust boundaries

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Product / revision / environment

[ ] Complete; add evidence and owner.

## Written authorization, scope and stop contact

[ ] Complete; add evidence and owner.

## Actor / tenant / asset / trust boundary

[ ] Complete; add evidence and owner.

## Assumptions / prerequisites / exclusions

[ ] Complete; add evidence and owner.

## Module-specific evidence

- Effective IAM/RBAC chain and identity origin
- Wrong-audience, tenant and action denial tests