Production protection correlation engine

1. A computing platform, comprising:

at least one processor;

a communication interface communicatively coupled to the at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

acquire, via the communication interface, access permission data, wherein the access permission data is aggregated from a plurality of data sources;

convert the access permission data into a normalized format, wherein converting the access permission data into the normalized format produces normalized permission data;

identify user-specific entitlements based on the normalized permission data;

classify user roles for a plurality of enterprise users, wherein classifying the user roles for the plurality of enterprise users produces user role classification data;

tag the normalized permission data based on the user role classification data;

based on tagging the normalized permission data, identify at least one enterprise user of the plurality of enterprise users having one or more toxic access permissions, wherein having one or more toxic access permissions include a user having a first user role and having access to both a production environment and a non-production environment;

in response to identifying the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions, trigger an access review process for the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions;

based on triggering the access review process for the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions, revoke one or more incompatible access permissions, wherein revoking the one or more incompatible access permissions produces updated access permission data; and

transmit, via the communication interface, to a system of record, the updated access permission data, wherein transmitting the updated access permission data to the system of record causes the system of record to store the updated access permission data in a database and limit access to enterprise resources based on the updated access permission data.

2. The computing platform of claim 1 , wherein classifying the user roles for the plurality of enterprise users comprises:

determining, for each enterprise user of the plurality of enterprise users, an enterprise role for the enterprise user based on organizational hierarchy information and the enterprise user's association with at least one computing environment of a plurality of enterprise computing environments.

3. The computing platform of claim 2 , wherein determining, for each enterprise user of the plurality of enterprise users, the enterprise role for the enterprise user comprises determining the enterprise role for the enterprise user to be one of development, quality assurance, production, or DevOps.

4. The computing platform of claim 2 , wherein the plurality of enterprise computing environments comprises the production environment and the non-production environment.

5. The computing platform of claim 4 , wherein the non-production environment comprises one or more of: a development environment, a testing environment, or a quality assurance environment.

6. The computing platform of claim 1 , wherein triggering the access review process comprises sending one or more user interfaces (UIs) to an enterprise security system.

7. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

generate a graphical representation of the normalized permission data; and

send, via the communication interface, to an enterprise security system, the graphical representation of the normalized permission data, wherein sending the graphical representation of the normalized permission data to the enterprise security system causes the enterprise security system to display the graphical representation of the normalized permission data.

8. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

generate a graphical representation of the updated access permission data; and

send, via the communication interface, to an enterprise security system, the graphical representation of the updated access permission data, wherein sending the graphical representation of the updated access permission data to the enterprise security system causes the enterprise security system to display the graphical representation of the updated access permission data.

9. The computing platform of claim 1 , wherein converting the access permission data into a normalized format comprises converting the access permission data into the normalized format using one or more of: regular expression, data wrangling operations, structured query language, or natural language processing.

10. The computing platform of claim 1 , wherein identifying user-specific entitlements based on the normalized permission data comprises identifying user-specific entitlements using machine learning.

11. The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:

monitor identification of enterprise users having one or more toxic access permissions;

generate a notification indicating a presence of the toxic access permissions amongst the enterprise users; and

send, via the communication interface, to an enterprise security system, the notification indicating the presence of the toxic access permissions amongst the enterprise users.

12. A method, comprising:

at a computing platform comprising at least one processor, a communication interface, and memory:

acquiring, by the at least one processor, via the communication interface, access permission data, wherein the access permission data is aggregated from a plurality of data sources;

converting, by the at least one processor, the access permission data into a normalized format, wherein converting the access permission data into the normalized format produces normalized permission data;

identifying, by the at least one processor, user-specific entitlements based on the normalized permission data;

classifying, by the at least one processor, user roles for a plurality of enterprise users, wherein classifying the user roles for the plurality of enterprise users produces user role classification data;

tagging, by the at least one processor, the normalized permission data based on the user role classification data;

based on tagging the normalized permission data, identifying, by the at least one processor, at least one enterprise user of the plurality of enterprise users having one or more toxic access permissions, wherein having one or more toxic access permissions include a user having a first user role and having access to both a production environment and a non-production environment;

in response to identifying the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions, triggering, by the at least one processor, an access review process for the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions;

based on triggering the access review process for the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions, revoking, by the at least one processor, one or more incompatible access permissions, wherein revoking the one or more incompatible access permissions produces updated access permission data; and

transmitting, by the at least one processor, via the communication interface, to a system of record, the updated access permission data, wherein transmitting the updated access permission data to the system of record causes the system of record to store the updated access permission data in a database and limit access to enterprise resources based on the updated access permission data.

13. The method of claim 12 , wherein classifying the user roles for the plurality of enterprise users comprises:

determining, by the at least one processor, for each enterprise user of the plurality of enterprise users, an enterprise role for the enterprise user based on organizational hierarchy information and the enterprise user's association with at least one computing environment of a plurality of enterprise computing environments.

14. The method of claim 12 , further comprising:

generating, by the at least one processor, a graphical representation of the normalized permission data; and

sending, by the at least one processor, via the communication interface, to an enterprise security system, the graphical representation of the normalized permission data, wherein sending the graphical representation of the normalized permission data to the enterprise security system causes the enterprise security system to display the graphical representation of the normalized permission data.

15. The method of claim 12 , further comprising:

generating, by the at least one processor, a graphical representation of the updated access permission data; and

send, by the at least one processor, via the communication interface, to an enterprise security system, the graphical representation of the updated access permission data, wherein sending the graphical representation of the updated access permission data to the enterprise security system causes the enterprise security system to display the graphical representation of the updated access permission data.

16. The method of claim 12 , further comprising:

monitoring, by the at least one processor, identification of enterprise users having one or more toxic access permissions;

generating, by the at least one processor, a notification indicating a presence of the toxic access permissions amongst the enterprise users; and

sending, by the at least one processor, via the communication interface, to an enterprise security system, the notification indicating the presence of the toxic access permissions amongst the enterprise users.

17. One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

acquire, via the communication interface, access permission data, wherein the access permission data is aggregated from a plurality of data sources;

convert the access permission data into a normalized format, wherein converting the access permission data into the normalized format produces normalized permission data;

identify user-specific entitlements based on the normalized permission data;

classify user roles for a plurality of enterprise users, wherein classifying the user roles for the plurality of enterprise users produces user role classification data;

tag the normalized permission data based on the user role classification data;

based on tagging the normalized permission data, identify at least one enterprise user of the plurality of enterprise users having one or more toxic access permissions, wherein having one or more toxic access permissions include a user having a first user role and having access to both a production environment and a non-production environment;

in response to identifying the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions, trigger an access review process for the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions;

based on triggering the access review process for the at least one enterprise user of the plurality of enterprise users having the one or more toxic access permissions, revoke one or more incompatible access permissions, wherein revoking the one or more incompatible access permissions produces updated access permission data; and

transmit, via the communication interface, to a system of record, the updated access permission data, wherein transmitting the updated access permission data to the system of record causes the system of record to store the updated access permission data in a database and limit access to enterprise resources based on the updated access permission data.

18. The one or more non-transitory computer-readable media of claim 17 , wherein classifying the user roles for the plurality of enterprise users comprises:

determining, for each enterprise user of the plurality of enterprise users, an enterprise role for the enterprise user based on organizational hierarchy information and the enterprise user's association with at least one computing environment of a plurality of enterprise computing environments.

19. The one or more non-transitory computer-readable media of claim 17 , wherein the instructions are configured to, when executed, further cause the computing platform to:

generate a graphical representation of the normalized permission data; and

send, via the communication interface, to an enterprise security system, the graphical representation of the normalized permission data, wherein sending the graphical representation of the normalized permission data to the enterprise security system causes the enterprise security system to display the graphical representation of the normalized permission data.

20. The one or more non-transitory computer-readable media of claim 17 , wherein the instructions are configured to, when executed, further cause the computing platform to:

monitor identification of enterprise users having one or more toxic access permissions;

generate a notification indicating a presence of the toxic access permissions amongst the enterprise users; and

send, via the communication interface, to an enterprise security system, the notification indicating the presence of the toxic access permissions amongst the enterprise users.