schema-registry-security
Security, authentication, authorization, and SOC 2 compliance.
Features
- Authentication: JWT-based with refresh tokens
- Authorization: RBAC and ABAC policies
- Audit Logging: Tamper-proof, hash-chained logs
- Secrets Management: Rotation, encryption at rest
- SOC 2 Type II: Full compliance framework with 108 controls
SOC 2 Trust Service Principles
- Security (CC6-CC7): 52 controls
- Availability (A1): 15 controls
- Processing Integrity (PI1): 12 controls
- Confidentiality (C1): 12 controls
- Privacy (P1-P8): 17 controls
See SOC2_USAGE_GUIDE.md for detailed documentation.
License
Apache-2.0