NIST SP 800-210 General Access Control Guidance for Cloud Systems
Section 3: Access control guidance for IaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

NIST SP 800-210 General Access Control Guidance for Cloud Systems 3.5b: Write IaaS access control policy rules by subject, operation, object and environment condition

What does 3.5b require?

IaaS policy is specified rule by rule over the subjects (end user, VM, hypervisor), operations (login, read, write, create) and objects (hypervisor, VMs on the same or other hosts, VMs of other providers, guest images, hardware resources), with environment conditions such as time, location and security impact level, and the designer decides for each rule whether access is permitted or denied from system requirements.

Maintained by Gerard Blokdyk

Other controls in Section 3: Access control guidance for IaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-210 General Access Control Guidance for Cloud Systems controls