Technical controls enforce identity-based access policies across all cloud environments and services
Enforcing MFA, role-based permissions and conditional restrictions in the cloud is identity management applied technically to cloud accounts, the systems A.5.16 asks organisations to cover.
Enforcing MFA and role-based permissions instead of standing cloud admin rights is the technical control that delivers A.8.2's least-privilege objective in the cloud.
Cloud access enforces MFA for everyone and role-based permissions instead of standing admin rights, carrying A.8.5's authentication requirement into cloud environments.