In January 2020, the US National Security Agency (NSA) released guidance for Mitigating Cloud Vulnerabilities into four classes: misconfiguration, poor access control, shared tenancy vulnerabilities, and supply chain vulnerabilities. Managing who has access to what and with which privileges is a real challenge for the Federal government. Identity and Cloud Access Governance enables IT to manage access to compute applications, as well as data across cloud environments. Governing privileged access also helps prevent risk from insider threats, identity compromise, and protects the infrastructure from malicious attacks and operator error. Applying machine learning/artificial intelligence techniques to prevent unwanted application and data access that typically leads to data breaches offers a significant opportunity to enhance digital security across government offices and departments.