基础设施工程师的RBAC
我觉得这是一个相当基本的问题，但是不知何故我找不到一个好的答案。
最近，审计师抱怨我们的云设置基于角色的访问控制。我的团队负责云基础架构（又称云工程，站点可靠性工程或DevOps），因此我们基本上拥有所有权利。我个人认为这是有道理的，因为我们有责任设置所有内容，并在必要时再次将其删除。我们是湿婆。
I feel this is a rather basic question, but somehow I'm unable to find a good answer.
Recently auditors are complaining about the Role Based Access Control for our cloud set-up. My team is responsible for the Cloud infrastructure (aka Cloud engineering, Site reliability engineering or DevOps) so we have basically all the rights. Personally I think this makes sense, given that we are responsible for setting everything up and where necessary remove it again. We're Shiva. ????
But I also understand this is a problem; especially because we can see into all the databases, buckets, etc. So what I'm looking for is an access level (say "maintainer") that is able to create and delete databases, but not look into them.
Does this exist and what is called?
If it doesn't, how then is this commonly solved?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
RBAC应该以这种方式剥夺：
RBAC should be aproached this way: