Forget “AI” (as in the magic pixie dust) - this is the way.
Knowing what data you have, curating it, and sharing it so others can benefit is half the battle. In order to implement beyond zero companies need to do exactly that. And that process is the killer app here - not can this person access this schema on this dbase, but knowing the schema exists, in one place and being able to use it will drive so much simplification in enterprises
We explored a closely related architecture at LinkedIn around centralized identity and policy enforcement at the action/resource boundary, which we presented at RSA Conference earlier this year. The extension to AI agents and machine-speed authorization is particularly interesting.
IIRC, it is not a VPN, it is a HTTPS proxy with client certificates. It relies on a proxy script to forward certain URLs to that proxy based on URL/hostname. It wouldn't necessarily proxy, say, your facebook.com traffic, unlike a VPN which at best can filter based on IP layer.
Comments
Forget “AI” (as in the magic pixie dust) - this is the way.
Knowing what data you have, curating it, and sharing it so others can benefit is half the battle. In order to implement beyond zero companies need to do exactly that. And that process is the killer app here - not can this person access this schema on this dbase, but knowing the schema exists, in one place and being able to use it will drive so much simplification in enterprises
We explored a closely related architecture at LinkedIn around centralized identity and policy enforcement at the action/resource boundary, which we presented at RSA Conference earlier this year. The extension to AI agents and machine-speed authorization is particularly interesting.
Zero trust proxies are the enemy of easy automation, change my mind.
I'm constantly frustrated when trying to do something simple like use an API Key with services wrapped in things like Google's IAP.
Much easier with a VPN
Google embeds a VPN in their internal browser for employees.
Running Chrome = running a VPN.
IIRC, it is not a VPN, it is a HTTPS proxy with client certificates. It relies on a proxy script to forward certain URLs to that proxy based on URL/hostname. It wouldn't necessarily proxy, say, your facebook.com traffic, unlike a VPN which at best can filter based on IP layer.
This is an advertisement for something called Beyond Zero.
Sure, but it’s also interesting
It is from Google, thanks but no thanks.