| 摘要 |
In one set of embodiments, methods, systems, and apparatus are provided to attach one or more service policies to resources in an enterprise by receiving a first service policy, receiving a first policy attachment that identifies one or more policy attachment attributes of resources in the enterprise, and generate a first global policy attachment that references the first policy attachment and the first service policy. The method can include receiving a request to access a resource including an attribute that matches one of the policy attachment attributes. The method can include determining that the first service policy is an effective policy for the resource based on the matching resource attribute with the policy attachment attribute. The method can include controlling access to the resource responsive to the request using the effective policy. |
| 主权项 |
1. A method for enforcing service policies in an enterprise, the method comprising:
receiving, by a computer system, a reference to a first service policy; receiving, by the computer system, a first policy attachment, the first policy attachment identifying one or more policy attachment attributes of one or more resources in the enterprise; generating, by the computer system, a first global policy attachment that references the first policy attachment and the first service policy; receiving, by the computer system, a request to access a resource; determining, by the computer system, that the first service policy is a first effective policy in an effective set of policies for the resource using the first global policy attachment by:
determining that the resource includes a first attribute that matches one of the one or more policy attachment attributes in the first policy attachment; and controlling, by the computer system, access to the resource responsive to the request using the effective set of policies. |
