Tagged articles

Policy Engine

7 articles · Page 1 of 1

Sep 20, 2026 · Backend Development

Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security

The article explains why RBAC fails for complex resource and context permissions, introduces ABAC with SpEL expressions, shows Spring Security integration via PermissionEvaluator, policy storage using SpEL strings, a deny-first policy engine, real-world scenarios (department orders, document visibility, time-based access), list permissions via SQL filtering, hot reload with Caffeine/Redis, and pitfalls like self-invocation and DB calls in policies.

ABACAttribute-Based Access ControlData Permissions

0 likes · 17 min read

Why RBAC Isn't Enough: Building an ABAC Policy Engine with Spring Security

360 Zhihui Cloud Developer

Sep 7, 2026 · Artificial Intelligence

Agent Harness Evolves from Loop to Semantic Task Runtime: Six Core Abstractions

This weekly analysis reveals how agent harnesses are maturing from simple execution loops into full semantic task runtimes, detailing six core abstractions—Scope, Context, Capability, State, Execution, Policy—and a five-layer architecture that moves deterministic system concerns out of LLM prompts into runtime primitives.

Agent RuntimeContext SecurityMemory Service

0 likes · 29 min read

Agent Harness Evolves from Loop to Semantic Task Runtime: Six Core Abstractions

Amazon Cloud Developers

Jan 9, 2026 · Artificial Intelligence

How AgentCore’s Four New Features Simplify Deploying Trustworthy AI Agents

Amazon Bedrock’s AgentCore introduces four preview‑stage capabilities—fine‑grained Policy, continuous Evaluations, long‑term Memory, and bidirectional Runtime streaming—each illustrated with real‑world use cases that boost efficiency, cut costs, and improve operational control for large‑scale AI agents.

AI agentsAgentCoreAmazon Bedrock

0 likes · 16 min read

How AgentCore’s Four New Features Simplify Deploying Trustworthy AI Agents

IT Architects Alliance

Oct 12, 2025 · Information Security

How to Secure Cross‑Region Access in Cloud Environments with Zero Trust

This article explores the complexities of cross‑region access control in cloud architectures, detailing latency, identity consistency, and policy uniformity challenges, and presents zero‑trust designs, distributed identity storage, multi‑layer encryption, edge policy execution, and monitoring strategies to achieve secure, high‑performance global access.

Policy Enginecloud securitycross region

0 likes · 12 min read

How to Secure Cross‑Region Access in Cloud Environments with Zero Trust

Ops Development Stories

Apr 18, 2024 · Cloud Native

Mastering Kyverno: From Installation to Advanced Policy Management in Kubernetes

This guide walks you through Kyverno, the CNCF‑graduated Kubernetes policy engine, covering its architecture, high‑availability installation, creation of validation, mutation, generation, and cleanup policies, as well as advanced features like variables, JMESPath expressions, and integration with Helm and the Kyverno Playground.

Admission ControlInfrastructure as CodeKubernetes

0 likes · 20 min read

Mastering Kyverno: From Installation to Advanced Policy Management in Kubernetes

Bitu Technology

May 23, 2023 · Backend Development

Why Tubi Chose Elixir and Its Benefits: A Technical Journey

The article explains Tubi's migration from PHP and Node.js to Elixir, detailing how the functional language improved the performance of their policy engine and other backend services, while sharing engineers' experiences and addressing concerns about using a niche technology.

BackendElixirPerformance

0 likes · 7 min read

Why Tubi Chose Elixir and Its Benefits: A Technical Journey

Alibaba Cloud Native

Oct 11, 2019 · Cloud Native

Can Dynamic Cgroup Tweaks Boost Kubernetes Resource Utilization?

This article shares Alibaba Cloud Container Platform's practical experience in improving container resource utilization by dynamically adjusting cgroup limits, describing real‑world challenges, the design of a policy‑engine solution, experimental results, lessons learned, and future directions for cloud‑native workloads.

KubernetesPolicy EngineResource Utilization

0 likes · 25 min read

Can Dynamic Cgroup Tweaks Boost Kubernetes Resource Utilization?