Behind the CNCF IAM Whitepaper: AuthN & AuthZ in Cloud Native Systems
summary
CNCF TAG Security and Compliance publishes an IAM whitepaper that defines two concrete reference architectures: a one cluster trust zone Basic pattern that enforces authN/authZ at the perimeter with optional internal tokens, and an Advanced zero trust pattern that requires MFA, SPIFFE SVIDs, mutual TLS, token exchange and per-hop PDP decisions. The paper maps requirements to OAuth 2.0, OpenID Connect, SPIFFE and OPA, recommends PDP as a local sidecar for low-latency authorization, and gives actionable deployment tradeoffs.
AI-written summary · about
chapters (7)
- 0:00CNCF IAM Whitepaper intro
- 1:03IAM challenges in cloud-native
- 4:56Designing AuthN and AuthZ
- 11:42Basic IAM architecture pattern
- 16:00Advanced zero trust pattern
- 23:27Key takeaways and community
- 24:50Closing and Q&A
related talks
05mAre you talking about Auth with and N or a Z?
41mZero-Trust Networks: Identity, AuthN, AuthZ, Audit
23mThe Long and Windy Road that leads to Cloud Native Security
23mKeynote: Cloud & Cloud Native Identity and Access Management: Challenges & Opportunities
35mDemystifying Zero-Trust for Cloud Native Technologies
36mCloud Native Identity Management
45mZero Trusting as a True Cloud Native Dev
40mCreating Cloud Native Security