Tag: security
All the articles with the tag "security".
Scope Every Read: Confidential Docs in a Shared Bucket
Per-matter prefixes, short-lived signed URLs, database-checked reads, and redacted logs for confidential documents in multi-tenant GCP apps.
One Shared Service Account Would Have Been 200 Lines Shorter
A generated graph of 131 services can share one identity or carry 131 of them. The second costs 216 IAM bindings, and it is the only version where a leaked credential is survivable.