Open Access

Non-Human Identity as the Primary Attack Surface: A Governance Architecture for AI Agent Credentials in Regulated Multi-Cloud Enterprises

https://doi.org/10.55640//ijctisn-v03i10-02

PDF

Parijat Sharma ¹ ,

⁴ Independent Researcher, USA

Abstract

Non-human identities now outnumber human identities in many enterprise environments and frequently hold persistent, poorly reviewed privilege. AI agents amplify the exposure, because an agent selects tools, retrieves data, and executes actions without continuous human involvement, which means an identity can be technically valid while the action it chooses is outside its original business purpose. This paper proposes a governance architecture that gives every service, workload, and agent a named owner, a verifiable identity, constrained authorization, short-lived credentials, continuous behavioral monitoring, and rapid revocation. The architecture treats a non-human identity as a governed security object carrying a lifecycle, a dependency graph, a risk tier, an action boundary, and an evidence record. For AI agents it separates the identity of the agent from the authority of each tool call, so that authenticating as an agent does not by itself authorize what the agent proposes to do. Governance is unified across clouds while provider-native enforcement is preserved rather than replaced, which lets an organization answer both who a workload is and what it may do at this moment. The architecture is proposed and synthesized from production control experience; it is not presented as a deployed enterprise control plane, and the paper states which quantities remain unmeasured.

Keywords

Non-human identity, machine identity, AI agent identity, workload identity

References

OWASP Foundation, "OWASP Top 10 Non-Human Identity Risks," 2025.

Verizon, "Data Breach Investigations Report," 2026.

S. Rose, O. Borchert, S. Mitchell, and S. Connelly, "Zero Trust Architecture," NIST SP 800-207, Aug. 2020. DOI: 10.6028/NIST.SP.800-207.

R. Chandramouli and Z. Butcher, "A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments," NIST SP 800-207A, Sep. 2023. DOI: 10.6028/NIST.SP.800-207A.

K. Tallam, "Authorization Propagation in Multi-Agent AI Systems: Identity Governance as Infrastructure," arXiv:2605.05440, 2026.

X. Yu, H. Geng, X. Zeng, and W. Knottenbelt, "SUDP: Secret-Use Delegation Protocol for Agentic Systems," arXiv:2604.24920, 2026.

K. Patil, "SentinelAgent: Intent-Verified Delegation Chains for Securing Federal Multi-Agent AI Systems," arXiv:2604.02767, 2026.

U. Uchibeke, "Before the Tool Call: Deterministic Pre-Action Authorization for Autonomous AI Agents," arXiv:2603.20953, 2026.

G. Zhu and C. Wang, "Intent-Governed Tool Authorization for AI Agents," arXiv:2606.22916, 2026.

S. V. Kodathala, "aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents," arXiv:2607.05518, 2026.

S. T. Avirneni, "Identity Control Plane: The Unifying Layer for Zero Trust Infrastructure," arXiv:2504.17759, 2025.

S. T. Avirneni, "Intent-Aware Authorization for Zero Trust CI/CD," arXiv:2504.14777, 2025.

R. N. Rajendran, S. K. Anumula, D. K. Rai, and S. Agrawal, "Zero Trust Security Model Implementation in Microservices Architectures Using Identity Federation," arXiv:2511.04925, 2025.

R. M. Sharma, "Ethical Hyper-Velocity (EHV): A Hardware-Rooted Zero-Trust Runtime Enforcement Architecture for Agentic AI Systems," arXiv:2605.17909, 2026.

S. J. Lazer, K. Aryal, M. Gupta, and E. Bertino, "A Survey of Agentic AI and Cybersecurity: Challenges, Opportunities and Use-case Prototypes," arXiv:2601.05293, 2026.

B. Campbell, J. Bradley, N. Sakimura, and T. Lodderstedt, "OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens," RFC 8705, Feb. 2020. DOI: 10.17487/RFC8705.

D. Fett, B. Campbell, J. Bradley, T. Lodderstedt, M. Jones, and D. Waite, "OAuth 2.0 Demonstrating Proof of Possession (DPoP)," RFC 9449, Sep. 2023. DOI: 10.17487/RFC9449.

Most read articles by the same author(s)

1 2 3 4 5 6 7 > >>

International Journal of Cyber Threat Intelligence and Secure Networking

Non-Human Identity as the Primary Attack Surface: A Governance Architecture for AI Agent Credentials in Regulated Multi-Cloud Enterprises

Abstract

Keywords

References

Most read articles by the same author(s)

Similar Articles