Abstract: An illustrative method includes monitoring activities within a compute environment and generating a logical graph model using at least a portion of the monitored activities. The logical graph model includes a set of nodes representative of one or more identities, applications, and resources in the compute environment and a set of edges representative of connections between nodes interconnected by the edges. An operation associated with security of the compute environment is performed using the generated logical graph model.

Abstract: An illustrative method includes accessing data representative of a first role associated with a set of permissions with respect to resources within the compute environment and specifying a group of identities assigned to the first role, determining that a first subgroup of one or more identities included the group of identities only uses a first subset of permissions included in the set of permissions to access the resources within the compute environment without using a second subset of permissions, and performing, based on the determining that the first subgroup of one or more identities only uses the first subset of permissions, an operation to reduce permissions usable by the first subgroup of one or more identities.

Abstract: An illustrative method includes accessing, by a data platform configured to monitor a compute environment, permissions data representative of a set of permissions that specify how an entity is entitled to interact with resources within the compute environment; collecting, by the data platform, runtime workload data representative of an actual interaction by the entity with the resources over a period of time; and performing, by the data platform based on the runtime workload data, an operation associated with modifying the set of permissions for the entity.

Abstract: An illustrative method includes accessing data representative of a first role associated with a set of permissions with respect to resources within the compute environment and specifying a group of identities assigned to the first role, determining that a first subgroup of one or more identities included the group of identities only uses a first subset of permissions included in the set of permissions to access the resources within the compute environment without using a second subset of permissions, and performing, based on the determining that the first subgroup of one or more identities only uses the first subset of permissions, an operation to reduce permissions usable by the one or more identities.

Abstract: Systems, methods, and formulas are disclosed for producing a shaped baked good with a rounded shape. In one embodiment, the formula may include a high melting point fat and a granular sugar at a weight ratio of about 1:1 to form a rounded cookie piece that minimizes flattening during baking. The cookie composition may be formed by passing a cookie dough between opposing rollers or press plates to form a web. The web may then be baked, rehydrated, separated, and deflashed to form individual rounded cookie pieces.

Abstract: Methods are disclosed for producing a shaped baked good with a rounded shape. In one embodiment, the methods can include providing a dough comprising a high melting point fat and a granular sugar at a weight ratio of about 1:1 to form a rounded cookie piece that minimizes flattening during baking. The dough may be formed by passing the dough between opposing rollers or press plates to form a web. The web may then be baked, rehydrated, separated, and deflashed to form individual rounded cookie pieces.