Access to cloud environments is formally governed by policies defining who can access what and under what conditions
Governing cloud roles, restricting administrator access and reviewing rights on a schedule extends A.5.15's access control requirement into cloud platforms specifically.
The cloud access policy facet supports A.5.23 by setting who gets which cloud role, how admin access is restricted, and when rights get reviewed.