Read and Download Free eBooks
Categories












No books found.
Try another title or author.












Try another title or author.
This NIST guide explains how attribute-based access control can be applied to applications composed of microservices. It uses a service mesh to separate application functions from the infrastructure responsible for authentication, authorization and the enforcement of access policies.
The discussion connects policy requirements with the information available about callers, services, requested operations and the surrounding context. It examines the components needed to make and enforce access decisions and shows how service-mesh mechanisms can support those components. The complete August 2021 publication retains the original architecture diagrams, policy examples, recommendations and references.
Ramaswamy Chandramouli, Zack Butcher and Aradhna Chetal (2021). Attribute-based Access Control for Microservices-based Applications Using a Service Mesh. National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-204B. Republished courtesy of the National Institute of Standards and Technology.