Merge branch 'wi252753-permission-management-ciem' of https://github.com/ElazarK/azure-docs-pr into wi252753-permission-management-ciem

Author: ElazarK

articles/defender-for-cloud/enable-permissions-management.md

@@ -50,6 +50,14 @@ When Permission Management (CIEM) is disabled, the CIEM recommendations within t
 
 The applicable permissions management (CIEM) recommendations appear on your subscription within a few hours.
 
+List of Azure recommendations:
+
+- Azure overprovisioned identities should have only the necessary permissions
+
+- Unused identities in your Azure environment should be revoked/removed
+
+- Super identities in your Azure environment should be revoked/removed
+
 ## Enable permissions management (CIEM) for AWS
 
 When you enabled the Defender CSPM plan on your AWS account, the **AWS CSPM** [standard is automatically assigned to your subscription](concept-regulatory-compliance-standards.md). The AWS CSPM standard provides Cloud Infrastructure Entitlement Management (CIEM) recommendations. 
@@ -87,6 +95,12 @@ When Permission Management is disabled, the CIEM recommendations within the AWS
 
 The applicable permissions management (CIEM) recommendations appear on your subscription within a few hours.
 
+List of AWS recommendations:
+
+- AWS overprovisioned identities should have only the necessary permissions
+
+- Unused identities in your Azure environment should be revoked/removed
+
 ## Enable permissions management (CIEM) for GCP
 
 When you enabled the Defender CSPM plan on your GCP project, the **GCP CSPM** [standard is automatically assigned to your subscription](concept-regulatory-compliance-standards.md). The GCP CSPM standard provides Cloud Infrastructure Entitlement Management (CIEM) recommendations. 
@@ -127,6 +141,14 @@ When Permission Management (CIEM) is disabled, the CIEM recommendations within t
 
 The applicable permissions management **(CIEM)** recommendations appear on your subscription within a few hours.
 
+List of GCP recommendations:
+
+- GCP overprovisioned identities should have only necessary permissions
+
+- Unused identities in your GCP environment should be revoked/removed
+
+- Super identities in your GCP environment should be revoked/removed
+
 ## Next step
 
 > [!div class="nextstepaction"]