3 ms·
I've heard that in the context of AWS, but I'm still not familiar with it. Do you recommend any articles in particular that give a good (brief) introduction to
by nathan-wailes 3y ago
I've heard that in the context of AWS, but I'm still not familiar with it. Do you recommend any articles in particular that give a good (brief) introduction to it?
- pan69 3y agoMaybe this Wikipedia page might get you started: https://en.wikipedia.org/wiki/Attribute-based_access_control https://en.wikipedia.org/wiki/Attribute-based_access_control
- nathan-wailes 3y agoThank you!
- AtNightWeCode 3y agoI don't think you want ABAC. ABAC is for the cases when a set of attributes will grant access. The more common thing is RBAC. RBAC is that a user have been assigned some roles that comes with access. A good example with ABAC is if person X uses an IPhone with the latest major updates then access to some wi-fi is granted. Also, roles comes with a hierarchy. This is important when you work with SOX controlled companies. Several security consultants will try to sell ABAC as a necessity along with RBAC. It is for sure not.
- cratermoon 3y agoA good backgrounder would be The Laws of Identity https://www.identityblog.com/stories/2005/05/13/TheLawsOfIdentity.pdf https://www.identityblog.com/stories/2005/05/13/TheLawsOfIde...
- nathan-wailes 3y agoThank you!
- kdeldycke 3y agoYou can start with: https://github.com/kdeldycke/awesome-iam https://github.com/kdeldycke/awesome-iam . But beware of the rabbit hole!