What General Access Control Guidance for Cloud Systems requires
This document presents cloud access control (AC) characteristics and a set of general access control guidance for cloud service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service). The main focus is on technical aspects of access control without considering deployment models (e.g., public, private, hybrid clouds etc.). Different service delivery models require managing different types of access on offered service components. Such service models can be considered hierarchical, thus the access control guidance of functional components in a lower-level service model are also applicable to the same functional components in a higher-level service model. In general, access control guidance for IaaS is also applicable to PaaS and SaaS, and access control guidance for IaaS and PaaS is also applicable to SaaS. However, each service model has its own focus with regard to access control requirements for its service. For instance, an IaaS provider may put more effort into virtualization control, and in addition to the virtualization control, a SaaS provider needs to consider data security and the privacy of services it provides. The intended audience for this document is an organizational entity that implements access control solutions for sharing information in cloud systems.
Pillar: Cloud & SaaS · Authority: National Institute of Standards and Technology · Version: 1.0.0 · Last updated:
Primary source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-210.pdf
SHA-256 integrity: 940a0b575f0d35024a511a9ce3b9b9bb1bfb81655f631a60a94210b5a2a8eb9e
Primary Citations — 9 traced to source
- Section 1.1: Access control (AC) dictates how subjects (i.e., users and processes) can access objects based on defined AC policies to protect sensitive data and critical computing objects in the cloud systems.
- Section 3.1: The network is shared among IaaS consumers, and it is important to secure the network traffic and the cloud's environment from being exploited by unauthorized consumers.
+ 7 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/nist-sp-800-210-cloud-access-control.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/nist-sp-800-210-cloud-access-control.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/nist-sp-800-210-cloud-access-control
- Back to registry: Browse all 10,085 compliance nodes