Authentication and Authorization

OIDC (OpenID Connect)
OAuth 2.0-based identity layer that lets apps verify who a user is and get basic profile info via standardized tokens.
Authentication and Authorization
Open Policy Agent (OPA)
Open Policy Agent (OPA) is an open source policy engine that evaluates rules against requests and configurations to enforce authorization and security checks.
Authentication and Authorization
Kubernetes RBAC
Kubernetes RBAC controls which users, groups, or service accounts can perform actions on cluster resources to limit access.
Authentication and Authorization
Kubernetes ServiceAccount
A Kubernetes ServiceAccount is an identity for pods to authenticate to the API server and access cluster resources.
Authentication and Authorization
Kubernetes ClusterRole
Kubernetes ClusterRole is a cluster-wide RBAC role that defines access to namespace and cluster resources.
Authentication and Authorization
Kubernetes RoleBinding
Kubernetes RoleBinding assigns a Role’s namespace permissions to users, groups, or service accounts for RBAC control.
Authentication and Authorization
Kubernetes ClusterRoleBinding
Kubernetes ClusterRoleBinding maps a ClusterRole to users, groups, or service accounts for cluster-wide RBAC access.
Authentication and Authorization
Kubernetes Role
Kubernetes Role is a namespaced RBAC object that defines allowed actions on resources, applied through RoleBindings.
Authentication and Authorization
Open Policy Agent (OPA)
Open Policy Agent (OPA) is an open source policy engine that checks rules for requests, deployments, and access.
Authentication and Authorization
AWS STS AssumeRole
AWS STS AssumeRole is an API call that returns temporary credentials for access allowed by another IAM role.
Authentication and Authorization
AWS IAM Role
AWS IAM Role is an identity with permissions that services, users, or workloads assume to access AWS resources.
Authentication and Authorization