Privilege escalationis a majorcloud security riskbecause attackers can:
Gain administrative access to cloud environments.
Modify security configurations, disable logs, and exfiltrate sensitive data.
Expand the attack blast radius, compromising multiple cloud resources.
To mitigateidentity escalation threats, security teams must:
Implement strong IAM policies with least privilege access.
Use Multi-Factor Authentication (MFA) and Just-in-Time (JIT) access.
Monitor IAM logs for unusual privilege escalations and lateral movements.
This is detailed in:
CCSK v5 - Security Guidance v4.0, Domain 12 (Identity, Entitlement, and Access Management) Cloud Controls Matrix (CCM) - IAM Controls and Privilege Escalation Prevention.

Elasticity of cloud resources is a key feature that directly contributes to enhanced performance and resource utilization while avoiding excess costs. Cloud elasticity allows resources (such as compute power, storage, and network bandwidth) to automatically scale up or down based on demand. This ensures that organizations are only using the resources they need at any given time, optimizing both performance and cost-efficiency.
Fixed resource allocations do not provide the flexibility needed to optimize resource utilization and can lead to either over-provisioning (wasting resources) or under-provisioning (affecting performance). Unlimited data storage capacity is not typical in all cloud environments and does not directly impact resource optimization or performance. Increased on-premise hardware is unrelated to cloud workload security, as it refers to traditional, non-cloud infrastructure.