Recently, there has been an increase in cases of breaches in public clouds (AWS, Azure, GCP), and in particular, problems with "excessive privileges" and inadequate privilege management such as "Shadow Admin" have become a problem. Achieving least privilege is the basic idea of zero trust, and achieving least privilege is also required as a security measure in public clouds. However, as public clouds have a wide variety of services and privileges, it is extremely difficult to properly manage and visualize them, and the current issue is that privilege management inevitably becomes complicated. In this seminar, we will introduce CIEM, a solution for achieving least privilege in public clouds, and "CEM", a CIEM product provided by CyberArk.