MANAGE AUTHORIZATION WITHIN A CONTAINERIZED WORKLOAD USING AMAZON VERIFIED PERMISSIONS

Summary from the TLDR InfoSec newsletter

Amazon Verified Permissions provides a mechanism for centralizing application authorization. This post from AWS provides four different deployment models for using Amazon Verified Permissions in containerized applications with various tradeoffs regarding resource use and authorization granularity: as an API Gateway external from a cluster, within the Kubernetes ingress controller, as a sidecar proxy, and within the application container directly.