Zero trust
A security model that removes implicit trust based on network location: each request to a resource is authenticated and authorized per session from the identity, the device’s state and other context, as close to the resource as possible (NIST SP 800-207).
- Defined in
- NIST SP 800-207, Zero Trust Architecture
Covered in
Choose cloud security posture tools and apply zero trust
What CSPM, CWPP, CIEM, CNAPP, DSPM and ASPM each find and miss, how they overlap, how to evaluate one on your own accounts, and how zero trust as defined in NIST SP 800-207 uses what they measure.
Authenticate workloads and authorize their service actions
Use service identities, mutual TLS and function permissions without mistaking an encrypted connection for complete authorization.
Workload identity federation: short-lived, scoped identities for services and CI
Trace how a running workload obtains a short-lived identity, write cloud trust policies that match immutable claims instead of names or wildcards, and keep the resulting credential limited by audience and authorization.