Permission Inheritance and Machine-Speed Risk Escalation in Agentic Al-Driven Cloud Operations
Temitope Ibrahim Lawal, Abiodun Oluwaseun Ariyo, Damilola Abidemi Akinwunmi, Ololade Zainab Adesokan, Akinde Michael Ogunmolu
Journal of Engineering Research and Reports · pp. 106–126 · Published 1 Apr 2026
10.9734/jerr/2026/v28i41853Abstract
This study investigates how permission inheritance and machine-speed execution influence cybersecurity risk escalation in agentic artificial intelligence–driven cloud environments. A quantitative empirical design was adopted using a network-based privilege propagation model and survival analysis. Identity and access relationships were represented as a directed authorization graph G=(V,E)G=(V,E)G=(V,E), while privilege expansion was evaluated using the Privilege Amplification Factor and Privilege Propagation Score derived from simulated cloud IAM datasets. Machine-speed escalation dynamics were examined through time-to-event modeling using survival probability and hazard ratio estimation. The findings reveal substantial privilege amplification, with administrative agents demonstrating an average Privilege Amplification Factor of 6.07 and access to 71% of reachable cloud resources. In addition, increasing execution speed from 5 to 200 operations per second reduced mean escalation time from 842 seconds to 68 seconds while raising the hazard ratio to 6.15. Based on these findings, the study proposes the Agentic Cloud Security Governance Model and recommends agent-specific identity isolation, dynamic least-privilege enforcement, real-time behavioral monitoring, and policy frameworks for governing autonomous agents in cloud infrastructures.
Cited by 0
No indexed citations yet.
Related research
- Agentic AI and Permission Inheritance Risks: Rethinking Access Control in Autonomous Systems — shares topic coverage
Article metrics
Real usage data collected on this platform.
0
Page views
0
PDF downloads
0
Outbound clicks
0
Citations
Views by country
Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".
No views recorded yet.
Traffic sources
Referring site, by host.
No traffic recorded yet.
Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.