買這商品的人也買了...
-
0 陷阱！0 誤解！8 天重新認識 JavaScript！（iT邦幫忙鐵人賽系列書）$550$467 -
$418微積分高效自學指南 (原書第三版)
商品描述
Get the eBook free when you register your print book at Manning.
Stale permissions and manual access policy enforcement are a constant security risk. Dynamic authorization--automatic systems that eliminate permanent access grants and manual review-and-revise processes--can radically improve access control. This practical, focused book shows you how to switch from crude yes/no permissions to flexible, policy-driven rules that adapt instantly.
Access control needs evolve as users require short-term data access, location-based services, temporary work assignments, or changing employment status. Dynamic authorization systems adapt access in real time. This book presents a view of dynamic authorization that merges role-based, attribute-based, and relationship-based models into a single framework. You'll learn exactly how dynamic authorization works, as well as the governance, architecture, and team structures necessary to sustain the approach in the enterprise.
Authorization in Action shows you how to:
- Establish RBAC, ABAC, and ReBAC for dynamic authorization
- Design adaptive access control policies
- Implement policy-based access control (PBAC)
- Integrate decision logic with organizational data
- Establish clear authorization governance structures
About the book
Authorization in Action comes to life through the all-too-real access control struggles facing the fictional ACME Corp's customer, HR, and engineering systems. Step-by-step walkthroughs make these examples concrete, while real-world incidents--like the Target data breach--show what's at stake when authorization goes wrong. You'll implement a dynamic authorization framework integrating the Cedar authorization policy language and the RBAC, ABAC, and ReBAC models, and you'll design adaptive policies that reflect real business rules. Plus, you'll build governance structures with clear ownership, aligned teams, and processes to review, audit, and evolve at scale.
About the reader
For IT workers, executives, directors, and product managers who know the basics of systems architecture.
About the author
Phil Windley is co-founder and organizer of the Internet Identity Workshop and Executive Director of the IIW Foundation, advancing human-centered digital identity. He was Founding Chair of the Sovrin Foundation (2016-2020) and most recently served as Senior Software Development Manager at AWS Identity.
商品描述(中文翻譯)
註冊您在 Manning 購買的紙本書，即可免費取得電子書。
過時的權限以及仰賴人工執行的存取政策，始終是持續存在的安全風險。動態授權（Dynamic Authorization）是指透過自動化系統，消除永久性存取授權，以及人工審查與修訂流程，能大幅改善存取控制。本書內容實用且聚焦，將引導您從粗略的「允許／拒絕」權限模式，轉向彈性且以政策為導向的規則，讓存取權限能即時適應變化。
當使用者需要短期資料存取權、以位置為基礎的服務、臨時工作指派，或其雇用狀態發生變化時，存取控制的需求也會隨之演進。動態授權系統能即時調整存取權限。本書將角色型、屬性型與關係型模型整合至單一架構中，介紹動態授權的完整觀點。您將確實了解動態授權的運作方式，以及在企業中維持此方法所需的治理機制、架構與團隊組織。
《Authorization in Action》將教您如何：
- 建立 RBAC、ABAC 與 ReBAC，以實現動態授權
- 設計自適應存取控制政策
- 實作以政策為基礎的存取控制（PBAC）
- 將決策邏輯與組織資料整合
- 建立明確的授權治理架構
關於本書
《Authorization in Action》透過虛構企業 ACME Corp. 在客戶、HR 與工程系統中所面臨、真實得令人不安的存取控制難題，讓動態授權概念具體呈現。循序漸進的操作說明，讓這些範例更加清楚易懂；而 Target 資料外洩事件等真實世界的事故，則呈現授權失誤所可能造成的嚴重後果。您將實作一套動態授權架構，整合 Cedar 授權政策語言，以及 RBAC、ABAC 與 ReBAC 模型；同時設計能反映實際商業規則的自適應政策。此外，您還將建立具備明確責任歸屬、團隊協作一致，以及可在大規模環境中進行審查、稽核與持續演進的治理架構與流程。
適合讀者
適合了解系統架構基礎的 IT 從業人員、企業主管、董事與產品經理。
關於作者
Phil Windley 是 Internet Identity Workshop 的共同創辦人與主辦人，也是 IIW Foundation 的執行董事，致力於推動以人為本的數位身分。他曾擔任 Sovrin Foundation 的創始主席（2016–2020），最近則任職於 AWS Identity，擔任資深軟體開發經理。
作者簡介
Phil Windley is co-founder and organizer of the Internet Identity Workshop and Executive Director of the IIW Foundation, advancing human-centered digital identity. He was Founding Chair of the Sovrin Foundation (2016-2020) and most recently served as Senior Software Development Manager at AWS Identity.
作者簡介(中文翻譯)
Phil Windley 是 Internet Identity Workshop 的共同創辦人兼主辦人，也是 IIW Foundation 的執行董事，致力於推動以人為本的數位身分。他曾擔任 Sovrin Foundation 的創辦主席（2016–2020 年），最近則擔任 AWS Identity 的資深軟體開發經理。
