Low-Latency Authorization Scope Analysis for Cloud Access Control Policies in Synchronous Interfaces

RAM/IAM policies underpin least-privilege enforcement in the cloud. Audit tools like Alibaba Cloud Access Advisor deliver policy authorization scope analysis via synchronous APIs with strict latency SLAs. State-of-the-art SMT-based methods (e.g., Stratified Abstraction) are accurate but suffer prohibitive latency on production policies with wildcards, high-cardinality Action/Resource sets and interleaved Allow-Deny rules. Coarse-grained fast methods generate excessive false positives, while zero false negatives is a non-negotiable safety baseline.