The development team of an e-commerce organization is migrating its code libraries to a public IaaS cloud provider, and the security policy states that source code must use multiple security…

While directory federation aids in identity management, biometric access is often impractical for cloud services and does not directly secure the network path or provide robust access control for source code libraries.

A Virtual Private Network (VPN) establishes a secure, encrypted tunnel for developers to access the IaaS environment, protecting data in transit and ensuring access originates from a trusted network. Two-factor authentication (2FA) enhances identity security by requiring an additional verification factor beyond a password, significantly strengthening access control to sensitive source code libraries.

Single Sign-On (SSO) simplifies authentication but does not inherently add an extra security factor or secure the network tunnel, and a Data Loss Prevention (DLP) solution primarily prevents data exfiltration, not necessarily securing access to the code itself.

A third-party Cloud Access Security Broker (CASB) solution monitors and enforces policies for cloud service usage, but it is a higher-level governance control and does not provide the direct secure network access and multi-factor identity verification like VPN and 2FA for specific source code access.