As CF integrates the Envoy proxy and the Istio control plane, one of the core areas of interest has been providing security policies for workloads across CFAR and CFCR. Identity and Access Management (IAM) is a key area, mixing end user single sign-on, service-to-service authentication/authorization, and control plane identity concerns. These policies cut across many layers, with much previously implemented as generic boilerplate code from language-specific libraries.

Learn how we plan to change this paradigm and allow you to declare codeless language-agnostic policies the platform will use to provide IAM as a service so you can focus on writing features, not infrastructure.