Distributed privilege access with Temporal
Blog post from Temporal
Companies face challenges in managing and provisioning resources, necessitating reliable orchestration to grant and revoke access while avoiding risks like orphaned resources and single points of failure. Temporal addresses these issues by ensuring execution and determinism, allowing for complex resource management across distributed systems. Serverless Workflows, an open-source specification by CNCF, enables flexible deployment and runtime re-engineering of workflows without altering underlying Temporal code, facilitating easier management of long-running workflows. By combining Temporal with Serverless Workflows, organizations can implement comprehensive access control strategies across different environments using technologies like gRPC services and Osquery for conditional access checks. The introduction of Thand, a distributed provisioning and access management platform, further enhances this approach by automating task routing using Temporal capabilities, allowing workflows to be declarative and distributed while maintaining execution guarantees, thus addressing security and operational complexities in large infrastructures.