Introduction
Axiomatics Policy DevOps (APD) is a tool for developing, testing, and deploying ALFA policies and attribute connectors within your Attribute-Based Access Control (ABAC) environment. ALFA (Attribute Language For Authorization) is the Axiomatics policy language for expressing access control rules. ABAC is an access control model where decisions are based on attributes of users, resources, and context — rather than static role assignments. Built on Gradle and JUnit, APD allows for a comprehensive testing approach that includes unit, integration, and system tests.
Its key features and benefits include:
- Test-Driven Development (TDD): APD enables a TDD approach for ALFA policies ensuring their reliability. By writing tests before code, you can identify and address potential issues early in the development cycle, leading to higher quality policies.
- CI/CD integration: APD seamlessly integrates with popular build tools such as Jenkins, Azure DevOps, and OpenShift. This integration streamlines the implementation of CI/CD pipelines, allowing for automated testing and deployment of ALFA policies, while accelerating the delivery of changes and reducing the risk of errors.
- Learning and experimentation: APD provides an ideal environment for learning and experimenting with ALFA and Axiomatics components. You can use APD to explore the capabilities of the language, test different policy configurations, and gain hands-on experience with the Axiomatics products.
- Enhanced policy lifecycle management: APD promotes treating ALFA policies as code, enabling better version control, collaboration, and traceability throughout the policy lifecycle. This approach improves maintainability, reduces the risk of inconsistencies, and simplifies policy management.
- Shift-left approach: APD fosters a shift-left approach to ABAC by enabling early and frequent testing. This helps identify and resolve defects earlier in the development process, reducing costs and improving overall quality.
Essentially, APD can help you manage ALFA policies effectively, ensuring they are well-tested, reliable, and aligned with your security requirements.
Notices
AXIOMATICS® is a registered trademark of Axiomatics AB, corporate identification no. 556708-1012, Sweden. Other trademarks are the property of their respective owners.
Except as otherwise expressly agreed in writing by Axiomatics AB, information in this document does not constitute in any way a representation, warranty or commitment on the part of Axiomatics.