How deeply does Generative AI in Action cover authentication and authorization?

Defines access controls, governance, encryption, and compliance roles but does not detail protocol or implementation mechanics.

Authentication and authorization

As explained in Generative AI in Action

Authorization is the process of determining which resources or operations an authenticated entity may access.

Authentication verifies who or what is interacting with enterprise data; authorization determines which resources or operations that authenticated entity may access. Together, they protect sensitive information used by generative AI applications. section 10.4.1

Apply the technique as part of the application architecture:

Enforce strict access controls for sensitive data and define access rights through data-governance frameworks. section 10.4.1
Protect data at rest and in motion with encryption alongside authentication and authorization protocols. section 10.4.1
Assess compliance frequently while aligning personal-data processing with GDPR, HIPAA, or CCPA requirements. section 10.4.1

Enterprise LLM data pipeline

A generative AI application integrates source systems through APIs, middleware, or ETL. Authentication and authorization restrict data interactions, while governance specifies permitted access and encryption protects transferred and stored data. section 10.4.1

How Generative AI in Action covers it

liveBook manning.com

Read Generative AI in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Effective Platform EngineeringAuthorization is the determination of whether an authenticated caller is permitted to perform a requested action or access a resource.
liveBook manning.com

Acing the CCNA Exam: Volume 2 Advanced Networking and SecurityAuthorization is the process of determining and granting the actions or resources an authenticated subject is permitted to access.
liveBook manning.com

Kubernetes for DevelopersAuthorization is the process of determining which actions an authenticated identity may perform on system resources.
liveBook manning.com

React in DepthAuthorization is the process of determining which authenticated users may access particular application resources or perform particular actions.

Compare how 5 books explain authentication and authorization →

Related concepts

aaa frameworkpart of · The AAA framework is an access-control model comprising authentication, authorization, and accounting for verifying identity, controlling access, and recording resource usage.
team membershipuses · Team membership is the association of a person or other principal with a team that determines participation, resources, or permissions available through that team.
Spring Securityimplemented by · Spring Security is a Spring framework for implementing application authentication, authorization, access control, and protection against common security threats.
AI agentconfigures · An AI agent is a computational system that uses artificial intelligence to interpret information, select actions, and pursue goals through interaction with an environment.
API gatewayused by · An API gateway is an intermediary that provides an entry point for client requests to backend APIs or services and routes or otherwise mediates those requests.
MCP serverconfigures · An MCP server is software that implements the Model Context Protocol to expose capabilities or information to compatible clients.

This explainer was generated by Manning's knowledge graph from the text of Generative AI in Action. The section links point to the parts of the book it draws on.