Envoy external authorization with the ext_authz filter lets the gateway and the service run checks against one policy set. This guide covers the CheckRequest to Cerbos mapping in CEL, policy outputs as request headers, embedded versus external PDP, bypass paths, caching trade offs and what AuthZEN leaves undefined.
Subscribe in seconds and receive Cerbos - All Posts's news feed updates in your inbox, on your phone or even read them from your own news page here on follow.it.
You can select the updates using tags or topics and you can add as many websites to your feed as you like.
And the service is entirely free!
Follow Cerbos - All Posts: Cerbos: Authorization for Enterprise Software and AI