Phillip Windley

Authorization in Action

Authorization in Action comes to life through the all-too-real access control struggles facing the fictional ACME Corp’s customer, HR, and engineering systems. Step-by-step walkthroughs make these examples concrete, while real-world incidents—like the Target data breach—show what’s at stake when authorization goes wrong. You’ll implement a dynamic authorization framework integrating the Cedar authorization policy language and the RBAC, ABAC, and ReBAC models, and you’ll design adaptive policies that reflect real business rules. Plus, you’ll build governance structures with clear ownership, aligned teams, and processes to review, audit, and evolve at scale.