Engineering
All articles tagged Engineering.
Recap of webinar: "Business case for externalized authorization"
Alex Olivier and Dan Maher discuss the complexities of managing user permissions as businesses grow. They highlighted external authorization as a scalable and flexible solution that enhances security, supports compliance, and streamlines operations, fostering sustainable growth and efficient access control.
Why external authorization is essential for modern software architecture
External authorization simplifies access control by centralizing policies, improving scalability, and enhancing security. This approach reduces development complexity, ensures consistency across systems, and makes compliance easier to manage. Explore the benefits and practical steps for implementation in this article.
Deploying Cerbos PDP on AWS Lambda and API Gateway: Step-by-step guide
Cerbos makes it easy to decouple and scale your access control with policy-as-code. In this guide, youâll deploy a fully serverless Cerbos PDP using AWS Lambda and API Gateway, with audit logging, S3-based policies, and flexible endpoint protection.
Integrating scalable authorization in .NET
Struggling with brittle role-based authorization in .NET Core Identity? This hands-on guide shows how to decouple complex access logic from your application by integrating Cerbos as a custom authorization providerâenabling scalable, policy-driven access control without scattering business rules across your codebase. Learn how to plug Cerbos into your ASP.NET Core pipeline and write policies that adapt as fast as your requirements do.
Advanced multi-tenant SaaS authorization with Cerbos: Role policies and scoped resource policies
Learn how Cerbos, with features like role policies and the fine-grained control offered by scoped resource policies (governed by scope permissions mode), provides a powerful toolkit to define and enforce multi-tenant security effectively.
Dynamic authorization for AI agents. A guide to fine-grained permissions in MCP servers
Learn how to building a secure MCP server where AI Agent tool access is managed by Cerbos, a decoupled, policy-driven Authorization service. You will learn how to enforce fine-grained authorization by externalizing access controls into human-readable policies.
Techniques for handling failure scenarios in microservice architectures
This article explores the strategies for managing failure scenarios in microservice architectures. It covers techniques to address both technical glitches and business impacts. You will learn how organizations can build fault-tolerant systems that are capable of gracefully handling cascading failures while maintaining core functionalities, even in a degraded state.
Don't fetch that. A developer's guide to pre- vs. post-filtering for authorization
While the initial simplicity of post-filtering is alluring, itâs a solution with a ceiling. It creates performance bottlenecks and security concerns that are difficult to engineer your way out of later. For modern, scalable, and secure applications, pre-filtering is the clear winner - you build a system that is performant, secure by design, and ready for future growth. And for those who need absolute certainty, the hybrid approach offers truly bulletproof authorization.
Revolutionize your authorization with Cerbos: A comprehensive video demo | ByteGrad
Discover how Cerbos simplifies authorization for microservices and Next.js applications in this video. Dive deep into Cerbos Hub's capabilities with a practical demo, showcasing ease of management and deployment. Watch now to enhance your security strategy.
Introducing Cerbos Hub Playground engine settings
This update to the Cerbos Hub Playground introduces new settings, which let you configure the Cerbos PDP engine used when evaluating policy during development, in a way that reflects your actual environment.
Recap of webinar: "Simplify access controls in Node.js, React & serverless apps" | Cerbos & ByteGrad
Join Alex Olivier, Cerbos Chief Product Officer, and Wesley, presenter of the popular ByteGrad Youtube channel, as they demonstrate how to author permissions and policy changes using Cerbos, and deploy those changes without changing any other code.
Cerbos Dagger module for authorization testing
Introducing the Cerbos Dagger module: a tool to streamline authorization testing by externalizing policies, integrating with CI pipelines, and simplifying permission management. Learn how this module can enhance your application's security and maintainability. Watch the demo and explore more on GitHub.
Simple role-based access control in Ruby
Tired of tangled if statements and scattered permission logic? This post walks through the evolution from DIY role checks in Ruby to scalable, production-grade authorization using Cerbosâimproving your flow without rewriting your app.
Authorization for non-human identities (NHIs) with Cerbos
Learn all about non-human identities - what they are, why securing them is important, along with how Cerbos can be used to effectively authorize NHIs.
SPIFFE identity parsing added to Cerbos PDP
Cerbos PDP now supports native parsing and evaluation of SPIFFE identities in authorization policies. This unlocks precise access control for non-human identities (NHIs) like services, workloads, and containers that rely on SPIFFE-based workload identity.
Cerbos Prisma integration v2.0: More powerful fine-grained authorization
Latest update to the Cerbos reference Prisma Query Plan Adapter - making it even easier to enforce fine-grained access control within applications using Prisma ORM. In this blog post, weâll explore the new features, use cases enabled, and how you can start using it today.
Simple Role-Based Access Control in JavaScript
Learn how to integrate Cerbos into a JavaScript To-Do List application for robust role-based access control (RBAC). This guide covers setting up Cerbos, defining roles and permissions, and best practices for secure and scalable authorization management. Perfect for developers looking to enhance application security with fine-grained access control.
Enterprise access control in service-oriented architectures
Choosing the right access control model for your enterprise isn't just a technical decision - itâs a business one. Explore the challenges of role explosion, the advantages of attribute-based access, and how a hybrid approach can simplify authorization while ensuring compliance and security.