SAFE WG Deep Dive
summary
Working group defines measurable attributes for access systems (expressibility, explainability, composability) and proposes an admin Bill of Rights plus audit-first features like log‑only dry run and joined analysis of policy and usage. An internal analysis of the top 500 GCP projects finds 95% overgranting — permissions granted but unused in 30 days — motivating tooling to document existing policies, analyze access patterns, map federated identity sources, and translate human policy intents into enforceable fragments.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:35What Does Access Control Mean
- 1:29Personas
- 2:35Use Cases
- 4:12What Are the Attributes of an Access Control System
- 11:17Attribute Based Access Control
- 30:47Federation
related talks
16mDeep Dive: Kubernetes Policy WG
52mIAM policy power hour
01h 32mSIG Auth Update and Deep Dive
58mCreate enterprise-wide preventive guardrails
19mMove toward least privilege with IAM Access Analyzer
52mThe Dark Underbelly of 3rd-Party Application Access to Corporate Data
23mScalable security: how to win friends and not burn...
45mThe Future of Authorization in Applications