Security and access control
Once the various landing zones are all connected in a mesh, the next most critical element of a data mesh architecture is managing access and security.
There are two main layers to security and access control:
- Authentication
- Authorization
Authentication verifies the identity of a user (username and password) to provide or deny access to a given Azure service or resource. Authorization determines what the authenticated user can do with the resource, as well as the operations they are allowed to perform.
To implement standardized authentication and authorization across your data mesh, we need an identity provider. While multiple solutions or tools might be available to implement identity management, the best practice is to employ a single identity provider. The most popular authentication provider on Azure is Azure Active Directory. In August 2023, Microsoft renamed the Active Directory service to Microsoft Entra ID (https://learn...
