https://www.idsalliance.org/blog/securing-cloud-access-with-continuous-access-evaluation-protocol/