Cloud platforms provide Internet-based computing services to users upon generation of their requests. Cloud computing services include platforms for developing applications, programs, and storage available over the Internet. Cloud service providers (CSPs) are the entities that provide Internet-based cloud computing services to users and businesses. Similarly, identity providers (IdPs) are the entities that provide online authentication services for decision-making regarding granting or denying access to a particular IT resource. The dependence on cloud computing platforms is exponentially increasing with each passing day. However, the most critical aspect of the cloud environment is data security, which comprises three fundamental parts, i.e., confidentiality, integrity, and availability. To improve the user’s confidence, data security is the top priority of CSPs. Data security in a cloud environment is a challenging and complex task that can be ensured by implementing a robust access control mechanism. The current access control approaches used by cloud platforms have been thoroughly reviewed in this paper, along with their benefits and drawbacks.