NIST SP 800-210 General Access Control Guidance for Cloud Systems
Section 4: Access control guidance for PaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

NIST SP 800-210 General Access Control Guidance for Cloud Systems 4.2: Scope APIs to each application and centralise authorisation for microservices

What does 4.2 require?

PaaS APIs confine each user's application so that data stays inaccessible between applications, and where packaged APIs run as microservices a centralised architecture provisions and enforces the access policies for all of them, with an authorisation server computing decisions across services written in different languages.

Maintained by Gerard Blokdyk

Other controls in Section 4: Access control guidance for PaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-210 General Access Control Guidance for Cloud Systems controls