Cerbos newsletter July 2024
Since our last update, we’ve released Cerbos PDP v0.37.0, and introduced a guide which helps users navigate authentication and authorization using Microsoft Entra External ID and Cerbos. We have also published a blog post in which we examine the differences between authentication and authorization, and how they work together to secure applications.
Cerbos Hub
Since the release of Cerbos Hub in November we have been heads-down ensuring the journey to get up and running with Cerbos in your environment is as slick as possible.
Audit Logs - Get exclusive early access:
One of the big advantages of decoupling authorization into a centralized service, are the audit logs, which are generated regardless of where in the application stack the permission checks are being made.
If you are using Cerbos Logs today, or planning to in the future, we have some new capabilities in the works which we would love to give you early access to. Reach out to our CPO, Alex Olivier, at [email protected] to get started.
Cerbos PDP
The v0.37.0 version of Cerbos PDP adds support for autocomplete when using the Cerbos REPL, new Kubernetes deployment options and updates to the AdminAPI.
The Cerbos REPL provides auto-completion for built-in commands and files, enhancing its use for the development and debugging of policies.
In addition to variables, InspectPolicies Admin API response also includes the derived roles that are referenced in each inspected policy. It also supports restricting the results to one or more policies using their IDs.?
Kubernetes users can deploy Cerbos as a DaemonSet using the official Helm chart, reducing resource usage compared to the sidecar model.
?The cerbos compile command provides better context information about YAML syntax errors in policies, and the cerbosctl inspect command can now produce output in machine-readable formats as well.
领英推荐
?Based on user feedback, some Admin API restrictions — such as the limit on the number of policies that can be updated in a single AddOrUpdatePolicy request — have been relaxed in this release.
?You can find the full release notes here: v0.37.0
Cerbos PDP is open source, check out our GitHub
Understanding and implementing efficient authentication and authorization mechanisms are crucial in building secure and scalable applications, which is why we’re excited to share the second part of our three-part series created in collaboration with Microsoft. This piece simplifies these complex processes, providing a guide for developers and software engineers on integrating Microsoft Entra External ID with Cerbos for robust authentication and fine-grained authorization in applications.?
For those of you who we met at European Identity and Cloud Conf in Berlin: thank you for stopping by and chatting with us. Your support means a lot!
We’re looking forward to the following conferences in the coming weeks:
Stay connected