NIST SP 800-210 General Access Control Guidance for Cloud Systems
Section 4: Access control guidance for PaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

NIST SP 800-210 General Access Control Guidance for Cloud Systems 4.3: Synchronise access policy across replicated PaaS data and write the PaaS policy rules

What does 4.3 require?

When data is duplicated across PaaS providers, a central access control policy system is kept so that any policy change updates the central system and the policies protecting the replicas elsewhere are synchronised from it. PaaS policy rules are specified over application users, hosted application VMs, developers and the provider, against memory data, middleware data, other applications' data and replication, with environment conditions, each decided as permit or deny.

Maintained by Gerard Blokdyk

Other controls in Section 4: Access control guidance for PaaS – NIST SP 800-210 General Access Control Guidance for Cloud Systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-210 General Access Control Guidance for Cloud Systems controls