Access Policies for Hybrid Cloud Environments
summary
Cloud and cluster access policies multiply: K8s RBAC, Istio RBAC, OPA plus IAM, firewall, quota and app-level rules produce dozens of overlapping controls that are hard to reason about. The session argues for a single management surface — storing policies in a central git-backed repo with CI/CD policy repo deployment, CRD/KRM resource descriptions, and test/simulation tooling that replays production traffic or plugs policy emulators. Practical asks: standardize error messages, audit-log filters, and a common simulation API so changes can be validated before rollout.
AI-written summary · about
chapters (4)
- 0:00Start
- 3:35Opportunities for Inconsistencies
- 6:35Why Should We Care
- 17:12User Access In A Hybrid World
related talks
36mCentralized Policy Management
40mSecurity Policy Management in the Hybrid Cloud
30mRedefining Access Control: Scaling Policy as Code for Humans and AI Agents
40mHow to Operationalize Access Policies for Multiple Clouds
16mDistributed application level RBAC with OPA
51mPermissions: Centralized or Decentralized? Both!
32mFine-Grained Policies RBAC with NGAC
48mBeyond Entitlements for the Cloud Native