Questions tagged [policies]

200 questions
0
votes
1 answer

Azure Policies via Terraform

Working on a code to apply CIS policies set via code to track changes. What I am trying to do is create a custom policy set that contains the policies within CIS Microsoft Azure Foundation Benchmark v1.4.0 initiative definition. I am using the…
bshah1976
  • 1
  • 1
0
votes
0 answers

Javascript policy-less ABAC in KeyCloak

I'm currently employing KeyCloak 19.0 (KC), I need to map an existing permission system to a new one based on KC. I've been browsing many resources up to now (mostly SO, KC's documentation, and videos on YouTube) and came to the conclusion that ABAC…
Chaos
  • 101
  • 3
0
votes
3 answers

Local Security policy using WMI

I need to retrieve list of users/groups who have access to perform volume maintain tasks using WMI objects on remote machine. What I can do it explicitly is On the Start menu, click Run. In the Open box, type secpol.msc. Expand Local…
Akki922234
  • 128
  • 3
  • 7
0
votes
1 answer

Pipelining API calls using Azure APIM Policies

I'm somewhat new to Azure APIM and am trying to figure out solution to a scenario which I've be tasked to solve using APIM Policies. Here's how the workflow is supposed to work: System A makes a REST call to the APIM gateway. This triggers APIM to…
Vishal
  • 2,103
  • 2
  • 16
  • 18
0
votes
1 answer

How to ensure the diagnostic settings for storage accounts Azure policy is permanently enforced?

In the course of an observability initiative I want to ensure all Azure Storage accounts always log into one specific Analytics Workspace. I have tried to achieve this with assigning an Azure Policy ("Configure diagnostic settings for storage…
hey
  • 2,643
  • 7
  • 29
  • 50
0
votes
1 answer

Where AWS stores the created AWSLoadBalancerControllerIAMPolicy policy and how can I see it

I'm studying AWS EKS and I'm following the ufficial AWS Documentation. As explained here I created the "AWSLoadBalancerControllerIAMPolicy" but I would like to check if it has been correctly created. How can I see the list of the created…
brian enno
  • 400
  • 5
  • 16
0
votes
1 answer

Setting permissions in Keycloak

I want to create role-based access control system using Keycloak's authorizaion system. I'm using OAuth 2.0 in microservice architecture and faced the following problem: I have records with unique IDs (they are rooted to other entities) and what I…
fire_Rising
  • 70
  • 1
  • 7
0
votes
0 answers

How to not call backend API if cache hit with the response using azure api management policies

I'm calling the backend logic app API and storing the data in cache. Even cache hit the success , outbound policy is calling the backend API and storing the data in the cache. Am i missing something here? Code for policies used as below
0
votes
0 answers

Azure apim policies are big

I have been using APIM to expose storage account and service bus. I am validating these apis using policies. I have been just validating few request headers and query parameters but it is already too much code in policies. Is this how the policies…
venkatesh k
  • 49
  • 1
  • 9
0
votes
1 answer

Laravel policy never called always 403

Laravel is being used as an API endpoint, I'm trying to control users ability to see certain portions of the site depending on which User type they are. Using either $this->authorizeResource() or $this->authorize() it always returns 403 without…
Bankzilla
  • 2,086
  • 3
  • 25
  • 52
0
votes
1 answer

Supabase - Policy based on subscription type

I'm quite new to Supabase and PostgreSQL and have stumbled upon a question. If I'm creating a Todo app where people should be able to sign in and depending on subscription type (regular users or pro accounts) the total number of todos should be…
crushen
  • 78
  • 10
0
votes
0 answers

Code that allows User to access folders AND file details

I have 2 snippets of code for Amazon's AWS S3 storage area. One allows access to certain User folders only, but does not allow the user to see the file/img details for some reason. When I add the 2nd snippet I found it allows the User to see the…
AdamT
  • 1
  • 1
0
votes
1 answer

Automatically set branch policies for different types of PRs in Azure Devops

We are trying to set up our repository's branch policies so that for a particular folder: Any PR pushing a new file to the repo must have a required reviewer Any PR making changes to existing files need not be approved by a reviewer We've had a…
0
votes
1 answer

GCP ops-agent policies for monitor and logg - error while running gcloud

I need your assistance for the below. gcloud beta compute instances ops-agents policies create ops-agents-policy-for-ubuntu…