Identity and access management
Identity and access management is the discipline and set of policies and systems for managing digital identities and controlling their authentication, authorization, and access to resources.
Data-Driven Cybersecurity
The administration of digital identities and the credentials, authentication, authorization, and access rights associated with them.
- How it is used
- Manages digital identities and access rights to protect organizational resources and support secure business operations.
- How deep it goes
- Explains IAM through identity life-cycle stages, centralized systems, access controls, and performance targets.
- Examples
- Uses an identity life-cycle table and ACME dashboard showing provisioning, de-provisioning, access problems, authentication, and audit metrics.
- What you can do after
- Diagnose IAM weaknesses by comparing access, provisioning, authentication, de-provisioning, and audit results with measurable targets.
Read how Data-Driven Cybersecurity explains identity and access management →
Architecting an Apache Iceberg Lakehouse
Identity and access management is the discipline and technology for authenticating identities and controlling their access to resources.
- How it is used
- Controls access to object data, catalog tables, metadata, and administrative operations across a data platform.
- How deep it goes
- Explains permission targets, identity integrations, encryption, auditing, and compliance controls without detailing policy syntax or implementation commands.
- Examples
- Uses object-store read and write permissions, catalog table access, IAM or LDAP integration, and administrative audit trails.
- What you can do after
- Operate/configure fine-grained access controls that align storage and catalog permissions with enterprise security and compliance requirements.
Read how Architecting an Apache Iceberg Lakehouse explains identity and access management →
Platform Engineering on Kubernetes
Identity management is the administration of user identities, accounts, credentials, and associated access information across applications and services.
- How it is used
- Frames identity management as an early security concern for defining permissions across cloud-native distributed services.
- How deep it goes
- Explains the frontend-mediated OAuth2 flow, identity providers, roles, and propagation, but stops short of implementation commands.
- Examples
- Uses unauthorized presentation deletion, frontend-mediated requests, Google or GitHub login, Keycloak, and Zitadel.
- What you can do after
- Evaluate authorization boundaries and understand how identity context reaches backend services.
Read how Platform Engineering on Kubernetes explains identity and access management →
Microsoft Azure in Action
An identity management system is a system that maintains digital identities and manages their authentication and access-related information.
- How it is used
- Positions Entra ID as Azure’s central gatekeeper for authenticating identities and managing resource access.
- How deep it goes
- Explains tenants, subscriptions, users, service principals, and managed identities, while deferring detailed MFA and RBAC configuration.
- Examples
- Uses Entra ID user creation and storage-account provisioning to illustrate identity boundaries and resource access.
- What you can do after
- Operate/configure Entra ID by creating users and preparing secure identities for applications and Azure resources.
Read how Microsoft Azure in Action explains identity and access management →
Related concepts
- Microsoft Entra IDincludes · Microsoft Entra ID is Microsoft's cloud-based identity and access-management service for authenticating users, applications, and services and controlling their access to resources.
- authorizationuses · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
- authenticationuses · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
- object storeconfigures · An object store is a storage system that stores and retrieves data as independently addressable objects containing content and associated metadata.
- identity provideruses · An identity provider is a system that authenticates users or other entities and supplies identity information or authentication assertions to relying applications and services.
- Amazon S3configures · Amazon S3 is Amazon Web Services’ cloud object-storage service, which stores and retrieves data as objects organized in buckets.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.