International Business Machines Corporation
High performance access control

Abstract:

A computer program product including a computer readable storage medium having program instructions to: receive a request for access to a micro-service for a subject to perform an action using a resource; determine whether an access policy governing the access for the subject to perform the action using the resource is stored in a cache memory; in response to the access policy being stored in the cache memory, allow or deny the request to the micro-service based on the access policy; and in response to the access policy not being stored in the cache memory, request a new access policy for the subject to perform the action using the resource, receive the new access policy that includes an access decision and a duration of the new access policy, allow or deny the request based on the new access policy, and store the new access policy in the cache memory.