Hacker News Reader

Comment by nathan-wailes | Hacker News Reader

Thank you for the tip! I tried Googling the term but I didn't see anything jumping out at me as being a good resource to read up on it; do you have particular things you'd recommend?

View on HN

AAA seems to be more common today. Authentication, Authorization and Accounting. (Including Audit in Accounting.)

Thank you! Is there a particular book / article / video you recommend? Researching these things can be a nightmare so I find it helpful to ask for recommendations.

This is more or less industry standard for some decades. You may try ChatGPT to guide you.

Or don't use ChatGPT and avoid going off on a tangent when it hallucinates something.

One may ask for sources... And the original Q in this case is so simple that even ChatGPT can easily answer it. It is not like there is room for opinions. It is basic CS projected on well known techs.

> One may ask for sources...

I know of a lawyer who did that. Didn't end well.

I come to this site to read opinions about things I do not know. Not for a variation of, "Google it"

I do not care about you or why you are here. The answer points to a source that have the correct answer to a very basic question. I have no obligations to you or your hubris. You millennials are really something else. How you even manage to tie your own shoelaces amazes me.

When I was a kid the fundamental crime in knowledge was to actually just tell all the answers. You are whining about a meta discussion on a topic where the original answer should have been just fking Google it.

Or try IAM: Identity and Access Management

I've heard that in the context of AWS, but I'm still not familiar with it. Do you recommend any articles in particular that give a good (brief) introduction to it?

Maybe this Wikipedia page might get you started:

https://en.wikipedia.org/wiki/Attribute-based_access_control

Thank you!

I don't think you want ABAC. ABAC is for the cases when a set of attributes will grant access. The more common thing is RBAC. RBAC is that a user have been assigned some roles that comes with access.

A good example with ABAC is if person X uses an IPhone with the latest major updates then access to some wi-fi is granted.

Also, roles comes with a hierarchy. This is important when you work with SOX controlled companies.

Several security consultants will try to sell ABAC as a necessity along with RBAC. It is for sure not.

A good backgrounder would be The Laws of Identity https://www.identityblog.com/stories/2005/05/13/TheLawsOfIde...

Thank you!

You can start with: https://github.com/kdeldycke/awesome-iam . But beware of the rabbit hole!

Reply on news.ycombinator.com