A system is provided including a database and a server. The database stores a plurality of cloud computing service accounts created on a cloud computing platform, a plurality of roles associated with each cloud computing service account, and a plurality of policies associated with each role. The server is in data communication with the database and containing a role risk rating engine. The role risk rating engine is configured to: select a first role of the plurality of roles from the database; retrieve the plurality of policies associated with the first role; determine a risk rating for the first role based on the plurality of policies associated with the first role; store the risk rating of the first role in the database; receive a query requesting the risk rating of the first role; and in response to the query, transmit the risk rating of the first role.