IAM's role is to ensure total cloud security for businesses using regulations and several verification stages inside a predetermined framework. How does IAM address the need to ensure the right access to resources?