Engineering
All articles tagged Engineering.
Row-level security for Apache Trino, powered by Cerbos Synapse
Add row-level security, column masking, and table-level access control to Apache Trino using Cerbos policies. No Rego, no custom plugins. Covers policy examples, attribute-based filtering from your IdP, per-role masking rules, and compliance audit logging through Cerbos Hub.
Mapping business requirements to authorization policy for utilities
Learn how to write and manage authorization policies for utility companies using PBAC. Compare RBAC vs. ABAC across real-world scenarios like SCADA access control, gas sensor policies, compliance audits, and vendor onboarding - with practical YAML and code examples that reduce downtime, cut costs, and simplify operations.
Policy as Code with Azure API Management and Cerbos
Integrate Cerbos with Azure API Management to externalize API authorization. Deploy Cerbos PDP on Azure Container Apps, enforce RBAC and ABAC at the gateway, validate JWTs, and manage versioned policies independently from backend services for scalable, secure access control.
Cerbos Hub Playground: Recent updates
Explore the latest Cerbos Hub Playground updates, including permission matrices, execution traces, diff views, templates, and sandboxed policy testing to build and debug authorization faster.
Announcing ePDP Rules: Fine-grained control for embedded policy bundles
Learn about ePDP Rules that have been released. Take advantage of fine-grained control over bundle composition and distribution. Deploy policies more broadly while maintaining security and performance.
Mapping business requirements to authorization policy for aviation
A practical guide to authorization in aviation. Learn how to implement RBAC and ABAC to secure flight, maintenance, and ticketing systems with contextual policies, audits, and real-time enforcement.
Migrating from OPA and Rego to Cerbos
Learn how to migrate from from OPA and Rego to Cerbos. This guide walks you through the differences, how to translate common patterns, how to update your integration layer, and how to roll out the migration safely.
Automate Cerbos policy uploads with the cerbos-store-action GitHub Action
Automate your authorization workflows with the new Cerbos Store Action for GitHub. Synchronise your policy files with Cerbos Hub automatically in CI/CD - no manual scripts or Docker commands needed.
Mapping business requirements to authorization policy in HR systems
Best practices for translating business requirements into authorization policy for your Human Resources (HR) system. We walk through the process of reviewing business requirements, analyzing them, defining policies, and ultimately deploying them to production systems as efficiently as possible.
Mapping business requirements to authorization policy for insurance
Explore how insurance companies can combat fraud with modern authorization. This guide explains PBAC in action across auto, life, and property insurance; with practical examples and policy templates to help you implement secure, fraud-resistant access control in your organization.
Run Cerbos natively inside AWS Lambda
Deploy Cerbos directly in AWS Lambda-either as a standalone function or as a lightweight extension layer-while using Cerbos Hub for centralized policy management and audit-logging.
Zero-Trust for microservices, a practical blueprint
Learn how to implement a Zero-Trust security model for microservices. Discover how to secure service-to-service communication, manage workload identities, and enforce fine-grained authorization across distributed systems, AI agents, and APIs.
Mapping business requirements to authorization policy for medtech
Learn how to translate business requirements to authorization policy for medtech. Decouple authorization to keep medtech platforms compliant (HIPAA, GDPR, FDA 21 CFR Part 11, NHS RBAC), resilient to updates, and safe. Explore break-glass access, audit logs, role-based control, and an example case study.
Filtering database results with Cerbos query plans
Learn how Cerbos PlanResources API uses partial evaluation to streamline authorization. Discover how query plans translate into efficient database filters, boost performance, and simplify access control with custom adapters.
Making Cerbos policies bulletproof with schemas
Learn how JSON schemas make Cerbos policies more reliable, secure, and easy to maintain. Catch integration errors early, prevent attribute injection attacks, and create bulletproof authorization for your applications.
Mapping business requirements to authorization policy for fintech
Best practices for translating business requirements into authorization policy for your fintech. We walk through the process of reviewing business requirements, analyzing them, defining policies, and ultimately deploying them to production systems as efficiently as possible.
Making application authorization context-aware with Cerbos outputs
Discover how Cerbos outputs turn binary authorization into rich, contextual decisions. Enable audit trails, rate limits, emergency access, and user guidance - without scattered code or compliance gaps.
Building a shared authorization vocabulary with Cerbos variables
Cerbos variables let you create a shared authorization vocabulary. Your platform or security team defines what these core concepts mean once. Product teams then build their features using these pre-validated, centrally-managed definitions without worrying about the implementation details.