NHI Blast-Radius Matrix
Map the non-human identities in your environment against the data classifications they can reach. Each row scores blast radius from data sensitivity, token persistence, and authentication method, then the matrix generates a policy blueprint for risk-proportional session lifetimes.
| Identity | Data classification | Token persistence | Auth method | Blast radius | Recommended TTL |
|---|
No identities mapped yet. Add at least one above to see blast radius scoring.
Blast radius scoring is a relative comparison tool for prioritizing identities within your own environment, not an absolute risk metric. The generated blueprint is illustrative pseudocode for an AWS STS-style policy engine. Adapt it to your actual identity provider and cloud platform. See the risk-proportional session lifetimes guide for the full architecture this matrix is built around.