Skip to main content

Crate uvb_secret_access_control

Crate uvb_secret_access_control 

Source
Expand description

§Secret Access Control

Enterprise-grade secret access control to address:

  • Risk #33: Secrets accessible by too many internal services

§Features

  • Service Identity Verification: Authenticate services via mTLS certificates
  • Principle of Least Privilege: Grant minimum required permissions
  • Service-Specific Secret Scoping: Secrets scoped to specific services
  • Access Audit Logging: Log all secret access attempts
  • Role-Based Access Control (RBAC): Define roles and permissions
  • Secret Access Policies: Fine-grained access control policies
  • Access Request Workflow: Approval workflow for sensitive secrets
  • Temporary Access Grants: Time-limited secret access

Structs§

AccessAuditLog
Access audit log
AccessGrant
Access grant
AccessRequest
Access request
InMemorySecretAccessStorage
In-memory storage for testing
SecretAccessControlManager
Secret access control manager
SecretScope
Secret scope
ServiceIdentity
Service identity

Enums§

AccessRequestStatus
Access request status
AccessResult
Access result
AccessType
Access type
Environment
Environment
SecretAccessError
Errors that can occur in secret access control
SecretType
Secret type
ServiceType
Service type
TrustLevel
Trust level

Traits§

SecretAccessStorage
Storage trait for secret access control