Access control list
An access control list is a collection of rules specifying which subjects or traffic may access a resource or perform particular operations.
Acing the CCNA Exam: Volume 1 Fundamentals and Protocols
A standard access control list is an IPv4 access control list that filters traffic primarily by source IP address.
- How it is used
- Uses packet filtering to restrict access to network resources and control communication between departments.
- How deep it goes
- Explains first-match processing, implicit deny, directions, types, Cisco IOS configuration, application, and verification.
- Examples
- Demonstrates engineering and accounting restrictions, server-LAN protection, numbered and named ACLs, Cisco CLI, and Packet Tracer practice.
- What you can do after
- Configure and verify standard numbered or named ACLs on Cisco IOS interfaces.
Read how Acing the CCNA Exam: Volume 1 Fundamentals and Protocols explains access control list →
Authorization in Action
An access control list is a list of permissions associated with a resource that specifies which entities or groups may access it.
- How it is used
- Controls access to individual resources through directly attached permission entries.
- How deep it goes
- Explains request-time list evaluation, groups, deny rules, inheritance, architecture mapping, and scaling limits without implementation-specific syntax.
- Examples
- Uses a shared marketing-folder permission list and request checks for named users and a team member.
- What you can do after
- Evaluate/understand when per-resource permission lists provide clear control and when scale, governance, or context require another model.
Read how Authorization in Action explains access control list →
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
An access control list is an ordered set of permit and deny rules that controls whether specified network traffic or access is allowed.
- How it is used
- Restricts VTY access and selects inside local addresses for dynamic NAT translation.
- How deep it goes
- Explains wildcard-mask configuration, application, implicit denial, and differing packet behavior for VTY access and NAT.
- Examples
- Uses Cisco IOS commands restricting 192.168.1.0/24 and selecting 10.0.0.0/24 for translation.
- What you can do after
- Configure and apply ACLs for VTY restrictions or dynamic NAT address selection.
Building Web APIs with ASP.NET Core
An access control list is a collection of rules specifying which principals are allowed or denied particular access types for a resource.
- How it is used
- Controls access to web API endpoints and other resources by matching users or groups with permitted actions.
- How deep it goes
- Explains permission matching, authentication order, anonymous access, and role-based implementation steps without detailing policy internals.
- Examples
- Uses read-only, update, delete, and database-seeding endpoints with basic-user, moderator, and administrator permissions.
- What you can do after
- Configure ASP.NET Core role permissions and JWT claims to authorize API operations for different user groups.
Read how Building Web APIs with ASP.NET Core explains access control list →
Amazon Web Services in Action, Third Edition: An in-depth guide to AWS
A network ACL is an ordered subnet-level rule set that allows or denies network traffic entering or leaving a virtual network subnet.
- How it is used
- Controls subnet ingress and egress while separating public proxies, private backends, databases, and other network security levels.
- How deep it goes
- Explains attachment, directional rules, priorities, stateless responses, ephemeral ports, and routing limitations through web-application network examples.
- Examples
- Uses public proxy and private backend subnets, HTTP port 80, ephemeral ports 1024–65535, CIDR ranges, and CloudFormation templates.
- What you can do after
- Configure subnet traffic filtering with AWS CloudFormation and diagnose missing return-path or routing permissions in a web application.
Architecting an Apache Iceberg Lakehouse
An access control list is a set of permissions attached to a resource that specifies which identities or groups may perform particular operations.
- How it is used
- Controls granular access to cloud-storage files and directories within analytics and lakehouse architectures.
- How deep it goes
- Explains the Unix permission contrast and cloud identity relationship, stopping short of command-level configuration.
- Examples
- Uses ADLS healthcare data and business-unit-restricted machine-learning datasets as access-control scenarios.
- What you can do after
- Operate/configure granular permissions for identities and groups in ADLS-backed analytics storage.
Read how Architecting an Apache Iceberg Lakehouse explains access control list →
Kafka for Architects
An access control list is a set of permissions specifying which identities may access a resource and what operations they may perform.
- How it is used
- Controls which authenticated Kafka identities may access resources and perform operations in an enterprise deployment.
- How deep it goes
- Defines ACL fields and operational caveats, but stops short of a complete administrative walkthrough or fine-grained permission catalogue.
- Examples
- Uses producer and consumer permissions, prefix-matched CARDS topics, and Customer 360 component communication.
- What you can do after
- Configure authorization policies with kafka-acls while accounting for topic, group, metadata, offset, and transactional access.
Read how Kafka for Architects explains access control list →
Apache Kafka in Action
An access control list is a collection of rules specifying which identities may perform operations on protected resources.
- How it is used
- Regulates which authenticated Kafka users or applications may access specific resources and perform permitted actions.
- How deep it goes
- Explains ACL fields, least-privilege examples, evaluation order, and migration trade-offs without detailing implementation commands.
- Examples
- Uses checkout, payment-processing, and checkout-analytics services with topic, consumer-group, prefix, host, Allow, and Deny examples.
- What you can do after
- Operate/configure Kafka ACLs using least-privilege assignments and plan tested enforcement during an unsecured-cluster migration.
Read how Apache Kafka in Action explains access control list →
Related concepts
- access control entryhas part · An access control entry is an individual rule in an access control list that specifies conditions and permits or denies access or traffic.
- extended access control listincludes · An extended access control list is an access control list that filters packets using multiple packet attributes, including Layer 4 protocols, source and destination IP addresses, and source and destination ports.
- dynamic port address translationused by · Dynamic Port Address Translation is a Network Address Translation technique that dynamically maps many internal hosts to one public IP address by distinguishing connections with transport-layer ports.
- authorizationuses · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
- numbered access control listincludes · A numbered access control list is an access control list identified by a numeric identifier and traditionally configured from global configuration mode.
- subnetworkconfigures · A subnetwork is a logical subdivision of an IP network with its own address range, routing scope, and network configuration.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.