It is critical to understand that almost anything in the cloud can assume an identity. Resources can have direct and indirect relationships, some of which are not obvious.