Introducing PEACH, a tenant isolation framework for cloud applications

This report introduces PEACH, a framework for evaluating and improving tenant isolation in multi-tenant cloud services, and analyzes past cross-tenant vulnerabilities (notably ChaosDB in Azure Cosmos DB) to illustrate common implementation gaps (privilege, encryption, authentication, connectivity, and hygiene). It provides guidance for assessing interface complexity, isolation schemes, and remediation steps to reduce the risk of cross-tenant data access, and directs readers to a whitepaper and resources for implementing best practices.