Engineering
All articles tagged Engineering.
Mapping business requirements to authorization policy for medtech
Learn how to translate business requirements to authorization policy for medtech. Decouple authorization to keep medtech platforms compliant (HIPAA, GDPR, FDA 21 CFR Part 11, NHS RBAC), resilient to updates, and safe. Explore break-glass access, audit logs, role-based control, and an example case study.
Filtering database results with Cerbos query plans
Learn how Cerbos PlanResources API uses partial evaluation to streamline authorization. Discover how query plans translate into efficient database filters, boost performance, and simplify access control with custom adapters.
Making Cerbos policies bulletproof with schemas
Learn how JSON schemas make Cerbos policies more reliable, secure, and easy to maintain. Catch integration errors early, prevent attribute injection attacks, and create bulletproof authorization for your applications.
Mapping business requirements to authorization policy for fintech
Best practices for translating business requirements into authorization policy for your fintech. We walk through the process of reviewing business requirements, analyzing them, defining policies, and ultimately deploying them to production systems as efficiently as possible.
Making application authorization context-aware with Cerbos outputs
Discover how Cerbos outputs turn binary authorization into rich, contextual decisions. Enable audit trails, rate limits, emergency access, and user guidance - without scattered code or compliance gaps.
Building a shared authorization vocabulary with Cerbos variables
Cerbos variables let you create a shared authorization vocabulary. Your platform or security team defines what these core concepts mean once. Product teams then build their features using these pre-validated, centrally-managed definitions without worrying about the implementation details.
Recap of webinar: "Business case for externalized authorization"
Alex Olivier and Dan Maher discuss the complexities of managing user permissions as businesses grow. They highlighted external authorization as a scalable and flexible solution that enhances security, supports compliance, and streamlines operations, fostering sustainable growth and efficient access control.
Why external authorization is essential for modern software architecture
External authorization simplifies access control by centralizing policies, improving scalability, and enhancing security. This approach reduces development complexity, ensures consistency across systems, and makes compliance easier to manage. Explore the benefits and practical steps for implementation in this article.
Deploying Cerbos PDP on AWS Lambda and API Gateway: Step-by-step guide
Cerbos makes it easy to decouple and scale your access control with policy-as-code. In this guide, youâll deploy a fully serverless Cerbos PDP using AWS Lambda and API Gateway, with audit logging, S3-based policies, and flexible endpoint protection.
Integrating scalable authorization in .NET
Struggling with brittle role-based authorization in .NET Core Identity? This hands-on guide shows how to decouple complex access logic from your application by integrating Cerbos as a custom authorization providerâenabling scalable, policy-driven access control without scattering business rules across your codebase. Learn how to plug Cerbos into your ASP.NET Core pipeline and write policies that adapt as fast as your requirements do.
Advanced multi-tenant SaaS authorization with Cerbos: Role policies and scoped resource policies
Learn how Cerbos, with features like role policies and the fine-grained control offered by scoped resource policies (governed by scope permissions mode), provides a powerful toolkit to define and enforce multi-tenant security effectively.
Dynamic authorization for AI agents. A guide to fine-grained permissions in MCP servers
Learn how to building a secure MCP server where AI Agent tool access is managed by Cerbos, a decoupled, policy-driven Authorization service. You will learn how to enforce fine-grained authorization by externalizing access controls into human-readable policies.
Techniques for handling failure scenarios in microservice architectures
This article explores the strategies for managing failure scenarios in microservice architectures. It covers techniques to address both technical glitches and business impacts. You will learn how organizations can build fault-tolerant systems that are capable of gracefully handling cascading failures while maintaining core functionalities, even in a degraded state.
Don't fetch that. A developer's guide to pre- vs. post-filtering for authorization
While the initial simplicity of post-filtering is alluring, itâs a solution with a ceiling. It creates performance bottlenecks and security concerns that are difficult to engineer your way out of later. For modern, scalable, and secure applications, pre-filtering is the clear winner - you build a system that is performant, secure by design, and ready for future growth. And for those who need absolute certainty, the hybrid approach offers truly bulletproof authorization.
Revolutionize your authorization with Cerbos: A comprehensive video demo | ByteGrad
Discover how Cerbos simplifies authorization for microservices and Next.js applications in this video. Dive deep into Cerbos Hub's capabilities with a practical demo, showcasing ease of management and deployment. Watch now to enhance your security strategy.
Introducing Cerbos Hub Playground engine settings
This update to the Cerbos Hub Playground introduces new settings, which let you configure the Cerbos PDP engine used when evaluating policy during development, in a way that reflects your actual environment.
Recap of webinar: "Simplify access controls in Node.js, React & serverless apps" | Cerbos & ByteGrad
Join Alex Olivier, Cerbos Chief Product Officer, and Wesley, presenter of the popular ByteGrad Youtube channel, as they demonstrate how to author permissions and policy changes using Cerbos, and deploy those changes without changing any other code.
Cerbos Dagger module for authorization testing
Introducing the Cerbos Dagger module: a tool to streamline authorization testing by externalizing policies, integrating with CI pipelines, and simplifying permission management. Learn how this module can enhance your application's security and maintainability. Watch the demo and explore more on GitHub.