News for hackers. Stuff that matters.

A comment on Blueprint for a distributed multi-region IAM with Go and CockroachDB. Parent comment

Re:Blueprint for a distributed multi-region IAM with Go and ... by leoqa on Tuesday August 08, 2023 @12:35PM (#37051666)
It’s quite similar mechanically to this blog post about Uber’s policy framework: https://www.uber.com/blog/attribute-based-access-control-at-....

We have an additional scaling dimension though, as our permission model is richer and mutable by end users, therefore our policies are not uniform. For special hot-path services, we use symmetric keys to reduce latency further but that makes rotations complicated.

[ Parent | on HN ]
Re:Blueprint for a distributed multi-region IAM with Go and ... by aeneas_ory on Tuesday August 08, 2023 @12:46PM (#37051862)
Awesome, thank you for following up! Will give this a read before bed. Would love to understand the encryption pieces, as I very much get the need for frequent updates of permissions (typically append, only sometimes remove). If you ever happen to blog about it please let me know :)
[ Parent | on HN ]