aperture
aperture copied to clipboard
Support Flow Control on AWS Gateway
What
- Gateway can work with OPA for authorization. Metadata such as headers and function names get sent to OPA as labels for authorization, refer this blog.
- The Gateway response can take arbitrary context where we can serialize the CheckResponse message (might need to flatten if it allows only key/value pairs)
- The context can be emitted in Gateway access logs using custom access logs
- Aperture Agents can run behind an Ingress Controller and K8s service on a dedicated cluster along with Controller. This cluster can be deployed per AWS region.
@krdln, @hasit,
Re-assigned the ticket to Hasit since he has the environment set up for this task