Fine-Grained Policies RBAC with NGAC
summary
NGAC (NIST) models access as a directed acyclic graph that overlays multiple policy classes (RBAC, location, topology) so a single decision can combine rules — e.g., instance1 is allowed for the SRE with read, instance4 is denied by location. Architecture maps to Istio/Envoy with sidecar enforcement calling a PDP/PAP/PIP and an event processor for time‑bound policies. Claim: evaluations run in linear scaling (past implementations were cubic), letting fine‑grained, auditable decisions without role explosion.
AI-written summary · about
chapters (8)
- 0:00Fine-grained access with NGAC
- 1:06Access control core models
- 9:13NGAC solves modern access
- 16:58NGAC architecture and cloud-native
- 23:20NGAC access decisions examples
- 25:28NGAC benefits and applications
- 30:46NGAC vs RBAC vs ABAC
- 31:28Conclusion
related talks
33mFine-Grained Policies RBAC with OpenFGA- 33mFine-Grained Policies RBAC with OpenFGA
16mDistributed application level RBAC with OPA
34mFine-Grained Permissions in K8s: What’s Missing, and How to Fix That
31mAccess Policies for Hybrid Cloud Environments
30mRedefining Access Control: Scaling Policy as Code for Humans and AI Agents
32mImplementing Authorization
22mTaming the Chaos: Fine-Grained RBAC in Argo CD for Incident Avoidance