l1_privilege Lee Briggs said: The privilege layer is how you fundamentally separate access in the cloud provider. Example Resources AWS: Account Azure: Subscription Google Cloud: Project DigitalOcean Resources Projects - Organize resources into projects