Attribute Based Access Control (ABAC) - An Authorization Method in API Design

### Giai đoạn: Nền Tảng & Khái Niệm Cốt Lõi **Attribute Based Access Control (ABAC) - An Authorization Method in API Design** Attribute Based Access Control (ABAC) is a flexible and powerful authorization method in the realm of API Design. Distinct from Role-Based Access Control (RBAC), which relies on predefined roles and permissions, ABAC uses attributes to build policies and make decisions. These attributes can be associated with the user, the action they want to perform, targeted resources, or the environment. With ABAC, finer-grained access control can be achieved, thereby improving the security and efficiency of APIs. This approach is widely used in complex and dynamic environments where access control requirements can be multifaceted and deeply context-dependent. ### Khái niệm cốt lõi: 1. **Attribute Based Access Control (ABAC) is a flexible and powerful authorization method in the realm of API Design** 2. **With ABAC, finer-grained access control can be achieved, thereby improving the security and efficiency of APIs** ### Tài liệu tham khảo chính thống: - [What is Attribute Based Access Control?](https://www.okta.com/uk/blog/2020/09/attribute-based-access-control-abac/) (article) - [Attribute Based Access Control](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction_attribute-based-access-control.html) (article)