PEACH
title: PEACH Tenant Isolation Framework radar_quadrant: Techniques radar_ring: Assess radar_position: inner
PEACH is a structured framework from Wiz Research for modeling and improving tenant isolation in multi-tenant SaaS and PaaS applications. The name is an acronym for five hardening dimensions: Privilege, Encryption, Authentication, Connectivity, and Hygiene. The framework was developed in response to a series of documented cross-tenant cloud breaches — ChaosDB (Azure Cosmos DB), ExtraReplica (Azure PostgreSQL), AttachMe (AWS EBS), and Hell's Keychain (IBM) — each demonstrating a failure in one or more of the five dimensions.
The framework operates in two steps. First, model the current isolation posture by reviewing each dimension: Privilege (minimal permissions for tenants and host processes), Encryption (unique per-tenant keys), Authentication (validated unique keys for tenant-to-control-plane communication), Connectivity (inter-host connections blocked by default), and Hygiene (no unnecessary secrets, software, or logs crossing tenant boundaries). Second, improve isolation via three mitigation strategies: reducing interface complexity, improving tenant separation, and increasing interface duplication where separation is not feasible.
Placed in Techniques / Assess / inner.
PEACH provides a shared vocabulary and structured review methodology for multi-tenant isolation that complements rather than duplicates existing radar blips. The AWS Well-Architected SaaS Lens (Techniques/Assess/inner) covers architecture patterns for multi-tenancy (silo vs pool vs bridge, tiering, onboarding); PEACH covers the security review of the isolation boundaries those architectures create. Together they form a complete design-and-review pairing for any multi-tenant cloud product.
Inner position reflects zero tooling cost, direct applicability to any SaaS product with multiple tenants sharing infrastructure, and the credibility of the Wiz Research provenance — the framework was derived from analysing real cross-tenant vulnerabilities rather than theoretical modelling. No setup is required; the framework is applied as a structured review exercise during architecture or security review.
Trial gate: a PEACH review completed against at least one production or staging multi-tenant service, with findings documented and at least one isolation gap identified and remediated.
