General Access Control Guidance for Cloud Systems book cover
Technology · 2020 · English

General Access Control Guidance for Cloud Systems

by Vincent C. Hu, Michaela Iorga, Wei Bao

About this book

This guide examines how access control changes across infrastructure, platform and software services in the cloud. It identifies responsibilities at each layer and explains how controls for lower-level components remain relevant as services become more abstract.

The recommendations cover networks, hypervisors, virtual machines, memory, APIs, data ownership, confidentiality, privileges, replicas and multitenancy. Diagrams and tables connect the guidance to familiar access-control functions, with an appendix mapping it to NIST security controls. The complete July 2020 publication preserves its original framework, references and supporting material.

Vincent C. Hu, Michaela Iorga, Wei Bao, Ang Li, Qinghua Li and Antonios Gouglidis. General Access Control Guidance for Cloud Systems. NIST, 2020. https://doi.org/10.6028/NIST.SP.800-210. Republished courtesy of the National Institute of Standards and Technology.