Skip to main content

Getting Started

One-Click Least Privilege. Zero Disruption.



© 2026 Sonrai Security. All rights reserved.

Overview​

Sonrai's Cloud Permissions Firewall will enable your teams to keep development pace without sacrificing on security best practices:

  • control access to the most privileged permissions within your cloud
  • integrate security into DevOps workflows, making cloud security a seamless experience

With a view of cloud activity from the past 30 days across all accounts within your AWS Organization, Azure Tenant, or GCP Organization, our Cloud Permissions Firewall helps you review and tighten controls for:

  • which services/regions/identities are used vs unused
  • which identities have direct entitlements to what permissions (used vs. unused)

Prerequisites​

Permissions at the Organization or Tenant level of your cloud

Implementation of the account onboarding prerequisites for your cloud:

How do I Get Started?​

Onboard your Cloud

Click to add a new account and onboard your AWS Organization, Azure Tenant, or GCP Organization.

The Sonrai Cloud Permissions Firewall Accounts page showing the + button used to add and onboard a new cloud organization or tenant.The Sonrai Cloud Permissions Firewall Accounts page showing the + button used to add and onboard a new cloud organization or tenant.

Reference: See the configuration guide for your cloud — AWS, Azure, or GCP.

Configure your baseline

I've previewed the hero cards at the top of the Services page and I'm ready to let Sonrai help form the template to optimally baseline my environment!

Exempt your break glass account(s)
Protect services in use
Quarantine zombies
Disable unused services
tip

Check out this overview of the Cloud Permissions Firewall capabilities!