ABAC: Attribute-Based Access Control in Cybersecurity
ABAC stands for Attribute-Based Access Control. Attribute-based access control makes authorization decisions by evaluating attributes of the user, resource, action, and environment. Policies can reference department, clearance level, device posture, time of day, and location.
How ABAC Is Used in Cybersecurity
Security architects choose ABAC when static roles are too coarse for fine-grained access decisions. Cloud engineers write ABAC policies in AWS IAM or Azure ABAC to control resource access dynamically. This model supports zero trust by evaluating context on every request.
Read the full glossary entry: Attribute-Based Access Control in Cybersecurity
Cybersecurity Roles That Work with ABAC
Related Cybersecurity Acronyms
Frequently asked questions
What does ABAC stand for?
ABAC stands for Attribute-Based Access Control. Attribute-based access control makes authorization decisions by evaluating attributes of the user, resource, action, and environment. Policies can reference department, clearance level, device posture, time of day, and location.
What is ABAC used for in cybersecurity?
Security architects choose ABAC when static roles are too coarse for fine-grained access decisions. Cloud engineers write ABAC policies in AWS IAM or Azure ABAC to control resource access dynamically. This model supports zero trust by evaluating context on every request.
Definitions are original explanations written for career development purposes. For authoritative technical definitions, refer to NIST, ISO, or the relevant standards body.