I'm investigating different types of authorisation solutions that would provide ABAC style access control. I was wondering if GCP IAM can be used for that purpose, to provide custom business application resource access control?
1 Answers
GCP IAM focuses on abac for its infrastructure. If you want to apply the same to content, data, services, and apps running on top of GCP, you'll need an externalized authorization framework e.g. AuthZForce or Axiomatics Policy Server that use ALFA/XACML to implement ABAC policies
Related