9 min readtechnicalFeatured
Identity Breach Response: Securing the Compromised Keymaker
Your IAM system is compromised. Learn the critical steps for identity breach response, including incident handling and securing compromised credentials.
All tags
Tag
Access Control
Read 15 articles on Access Control by Ashish Srivastava — practical guides covering implementation patterns, security, and production lessons.
15 posts
11 min readtechnicalFeatured
Implementing Conditional Access Policies with Keycloak and ForgeRock
Learn how to configure context-aware access control using conditional access policies in Keycloak and ForgeRock environments.
Part 1 · Security Architecture Series
9 min readtechnicalFeatured
IAM in Financial Services: PCI-DSS & SOX Compliance
Explore how robust IAM solutions ensure regulatory compliance and security within the financial services sector.
11 min readBackendFeatured
IAM for Data Lakes: Securing Big Data
Explore essential IAM techniques for securing big data environments using tools like Apache Ranger and AWS Lake Formation.
Part 1 · Data Lake Security Series
8 min readBackendFeatured
Implementing Identity Governance with Custom Policy Engines
Learn how to build custom policy engines for identity governance using tools like OPA and Cedar to manage access control effectively.
8 min readtechnicalFeatured
Implementing Entitlement Management for Fine-Grained Authorization
Learn how to implement entitlement management to achieve fine-grained authorization through XACML and policy engines for secure access control.
9 min readtechnicalFeatured
Implementing Delegated Administration in IAM Systems
Learn how to implement delegated administration in IAM systems to manage scoped admin roles and secure organizational access effectively.
8 min readTechnicalFeatured
Identity-First Security: Shifting to Identity Perimeter
Learn how identity-first security redefines the perimeter, enabling strong zero trust architectures in modern distributed environments.
9 min readtechnicalFeatured
Implementing Attribute-Based Access Control (ABAC) with Spring Security
Learn how to build dynamic authorization logic with ABAC, Spring Security, OPA, and Rego policies for fine-grained access control in Java applications.
9 min readtechnicalFeatured
RBAC vs ABAC: Static Roles vs. Dynamic Attributes
Compare Role-Based Access Control and Attribute-Based Access Control models to determine the best authorization strategy for your infrastructure using OPA and XACML.
9 min readtechnicalFeatured
Healthcare Identity Management: HIPAA Compliance & IAM
Explore how healthcare organizations implement identity and access management to ensure HIPAA compliance and protect sensitive patient data within EHR systems.
9 min readDevelopmentFeatured
AWS IAM Boundaries, SCPs & ABAC: Advanced Access Control
Explore advanced access control techniques using IAM policy boundaries, Service Control Policies, and attribute-based access control.
Part 8 · AWS IAM & Cloud Security Series
9 min readDevelopmentFeatured
Identity-Aware Proxy: Securing Applications Without VPNs
Discover the shift from traditional VPNs to identity-aware proxies for modern zero trust security architectures.
Part 7 · Zero Trust & Modern Security Architecture Series
9 min readtechnicalFeatured
BeyondTrust: Building a Zero Trust Identity Framework
Explore how BeyondTrust constructs a comprehensive zero trust identity framework utilizing advanced assurance levels and trust mechanisms for modern security architectures.
Part 4 · Zero Trust & Modern Security Architecture Series
8 min readBackendFeatured
Securing REST APIs with OAuth 2.0 Resource Server
Implement secure access for your Spring Boot applications by configuring an OAuth 2.0 Resource Server to validate JWT tokens and enforce scope-based access control.