Authorization is the process of determining which actions or resources an authenticated participant is permitted to access.
Authorization determines which actions or resources an authenticated participant may access. It is a security technique for protecting access to an application and its data. section 12.5
In a microservices application, security matters because more than one gateway may be publicly accessible. Keeping internal services and critical resources from direct external access is one protective measure; it does not replace authorization. section 12.11section 12.5
How Bootstrapping Microservices, Second Edition: With Docker, Kubernetes, GitHub Actions, and Terraform covers it
How deep it goes
Names authorization as a security technique but does not specify policies, implementation, or enforcement.
What you can do after
Understand authorization's role in protecting access within application security.
How it connects
Pairs authorization with authentication and encryption as security techniques.
Spring Security in Action, Second EditionAuthorization is the process of determining whether an authenticated entity has permission to perform an action or access a resource.
ASP.NET Core in Action, 3eAuthorization is the process of determining whether an authenticated subject has permission to perform an operation or access a resource.
Architecting an Apache Iceberg LakehouseAccess control is the restriction of data or system operations to authorized users or services according to defined permissions.
Generative AI in ActionAccess control is the practice of restricting access to systems, resources, or data according to identity, policy, or authorization.
.NET in Action, Second EditionAuthorization is the process of determining which actions or resources an authenticated or anonymous principal is permitted to access.
Build AI-Enhanced Web AppsAuthorization is the process of determining which authenticated users or principals are permitted to access resources or perform actions.
Apache Kafka in ActionAccess control is the enforcement of rules that determine which principals may access particular data or perform particular operations.
Data-Driven CybersecurityAuthorization is the process of determining and granting permitted access to resources or operations after an identity or entity has been established.
Spring AI in ActionAuthorization is the determination of whether an authenticated subject has permission to perform a requested operation or access a resource.
Grokking Web Application SecurityAccess control is the enforcement of rules governing which principals may access particular resources or perform particular actions.
AI for Everyday ITAccess control is the restriction and management of who or what may access systems, data, or resources and which actions they may perform.
Digital Twins in ActionAccess control is the restriction and authorization of access to resources or actions according to identities, roles, or policies.
Kubernetes in Action, Second EditionA file permission is an access right specifying whether a user class may read, write, or execute a filesystem object.
authenticationcontrasts with · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
role-based access controlincludes · Role-based access control is an authorization model that assigns permissions to roles and grants users or other principals access through their assigned roles.
principle of least privilegeconfigured by · The principle of least privilege is a security principle that grants each user, process, or other subject only the access rights necessary for its authorized tasks.
securityused by · The protection of systems, information, resources, and operations against unauthorized access, use, disclosure, alteration, disruption, or destruction.
rolepart of · A role is a defined function, responsibility, perspective, or set of permissions associated with a participant in an organization or system.
This explainer was generated by Manning's knowledge graph from the text of Bootstrapping Microservices, Second Edition: With Docker, Kubernetes, GitHub Actions, and Terraform. The section links point to the parts of the book it draws on.
