Posts with keyword: abac

4 entries

Using Amazon Cognito Tokens for Fine-Grained Access Control

Mon Jun 26 10:27:00 2023

My team at AWS worked on this integration between Amazon Verified Permissions and Cognito.
Continue reading {Using Amazon Cognito Tokens for Fine-Grained Access Control}

OAuth and Fine-grained Access Control

Tue Apr 18 16:31:00 2023

If you're building an application that allows sharing among its users of whatever resources they build, then you need the fine-grained permissioning that a policy-based access control system provides.
Continue reading {OAuth and Fine-grained Access Control}

Minimal vs Fully Qualified Access Requests

Tue Apr 4 09:29:00 2023

By creating fully qualified authorization contexts from minimal requests, a policy information point reduces the burden on developers building or integrating policy enforcement points, allows for more flexible and reusable policies, and enriches authorization contexts to allow more precise access decisions.
Continue reading {Minimal vs Fully Qualified Access Requests}

Not all PBAC is ABAC: Access Management Patterns

Wed Mar 15 14:41:00 2023

Exploring the architectural patterns we can use with policy-based access control (PBAC) illustrates the difference between policy-based and attribute-based access control (ABAC).
Continue reading {Not all PBAC is ABAC: Access Management Patterns}