search

simonireilly / saas-stack

Multi-tenant POC for federated identities with AWS CDK
saas-stack.vercel.app
27 stars 1 forks source link

Create Basic Role Based Access Control Example #5

Open simonireilly opened 2 years ago

simonireilly commented 2 years ago

Role-based access control (RBAC)

In role-based access control, a user would be restricted to a set of operations that can be performed by their role.

Examples from Yan Cui: https://theburningmonk.com/2021/03/how-to-secure-multi-tenant-applications-with-appsync-and-cognito/

Goals

It should be possible to control the access these users have to the data, in tables, and API's

mnsuccess commented 11 months ago

@simonireilly Can we use Amazon Verified Permissions for RBAC https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-verified-permissions-generally-available/