Role Based Access Control (RBAC) vs Attribute Based Access Control (ABAC) 

Role Based Access Control (RBAC) vs Attribute Based Access Control (ABAC)
Role-based access control (RBAC) is a method of restricting network access based on the roles of individual users within an enterprise. Organizations use RBAC -- also called role-based security -- to parse levels of access based on an employee's roles and responsibilities.
Attribute-based access control (ABAC) is an authorization strategy that defines permissions based on attributes. In AWS, these attributes are called tags. You can attach tags to IAM resources, including IAM entities (users or roles) and to AWS resources. You can create a single ABAC policy or small set of policies for your IAM principals. These ABAC policies can be designed to allow operations when the principal's tag matches the resource tag. ABAC is helpful in environments that are growing rapidly and helps with situations where policy management becomes cumbersome.
#aws #amazonwebservice #handsonlearning