Company
Date Published
Author
Rob Barnes
Word count
806
Language
English
Hacker News points
None

Summary

HashiCorp Boundary is an open source project that enables users to securely access dynamic hosts and services with fine-grained authorization, designed to manage session connectivity to infrastructure in a controlled manner. It uses scopes as containers to isolate permissions boundaries, creating defined blast radii for mitigation of identified risks during threat modeling exercises. Scopes can be thought of as levels within the domain model, starting from global scope at the top level to project scope at the lowest level, with organizations and projects serving as child scopes in between. Boundary approaches Identity and Access Management (IAM) by creating principals such as users and groups, assigning capabilities through grants, roles, and authentication methods. The system's access management starts at the bottom level with Actions, which can be specified in Grants, and Roles are a collection of zero or more grants that belong to a single scope. Boundary integrates with Terraform provider for automation and management of infrastructure state.