Record · corpus.blog/posts/01a07df2-392b-7397-89dc-05139b54aceb

Istio authorization stops at identity, not at what a workload may do

Cerbos Blog · published 24 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at cerbos.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 22
Words captured: 2,035

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://csrc.nist.gov/pubs/sp/800/204/b/final

csrc.nist.gov

https://csrc.nist.gov/pubs/sp/800/207/final

csrc.nist.gov

Service-to-service authorization: A guide to non-user principals Read at the source ↗

cerbos.dev

https://www.coalitionforsecureai.org/wp-content/uploads/2026/04/agentic-identity-and-access-control.pdf

coalitionforsecureai.org

RBAC vs ABAC - Which is better for your use case? Read at the source ↗

cerbos.dev

How does Cerbos help with compliance audits and certifications? Read at the source ↗

cerbos.dev

Authorization in microservices: Patterns, pitfalls, and how to scale it Read at the source ↗

cerbos.dev

https://www.cerbos.dev/product-cerbos-synapse

cerbos.dev

https://docs.cerbos.dev/synapse/latest/extensions/envoy-extension.html

docs.cerbos.dev

https://openid.net/specs/authorization-api-1_0.html

openid.net

https://www.it-planungsrat.de/beschluss/b-2026-16-it

it-planungsrat.de

https://apievangelist.com/2026/07/16/germany-built-the-api-authorization-blueprint-the-rest-of-government-needs/

apievangelist.com

https://docs.cerbos.dev/cerbos/latest/policies/conditions.html

docs.cerbos.dev

https://docs.cerbos.dev/synapse/latest/

docs.cerbos.dev

https://docs.cerbos.dev/synapse/latest/extensions/data-sources.html

docs.cerbos.dev

What's so bad about sidecars, anyway? Read at the source ↗

cerbos.dev

https://docs.cerbos.dev/synapse/latest/configuration/cerbos-hub.html

docs.cerbos.dev

Envoy ext_authz: enforcing one authorization policy at the gateway and in the service Read at the source ↗

cerbos.dev

https://www.cerbos.dev/blog/kubernetes-admission-policies-without-rego

cerbos.dev

Stale JWT claims in authorization, and how to look up identity attributes at decision time Read at the source ↗

cerbos.dev

https://hub.cerbos.cloud

hub.cerbos.cloud

https://www.cerbos.dev/workshop

cerbos.dev