The principle of Segregation of Duties (SoD) focuses on implementing multiple security layers by dividing responsibilities among different individuals or systems to ensure that no single entity has enough control to misuse or compromise access. This principle helps to prevent fraud, error, and misuse by ensuring that critical tasks are divided and that sensitive actions require multiple people or processes to perform, adding an extra layer of security.
Continuous Monitoring refers to the ongoing observation of activities to detect unusual behavior, but it is not directly about diluting access power. Federation involves linking multiple identity management systems together to allow access across different domains but does not specifically address limiting access power through multiple security layers. Principle of Least Privilege ensures that users have only the minimum necessary access to perform their tasks, but it does not directly involve dividing duties or responsibilities.

The primary purpose of Identity and Access Management (IAM) systems in a cloud environment is to govern and control which identities (users, groups, or services) have access to which resources within the cloud. IAM systems ensure that only authorized users and services can access specific cloud resources, and they help enforce security policies such as least privilege access, role-based access control (RBAC), and multi-factor authentication (MFA).

Cloud sprawl leads to the distribution of assets across multiple locations, making it challenging to maintain visibility and security control over all resources. Reference: [Security Guidance v5, Domain 4 - Organization Management]