Since our last update, we’ve released Cerbos PDP v0.37.0, and introduced a guide which helps users navigate authentication and authorization using Microsoft Entra External ID and Cerbos. We have also published a blog post in which we examine the differences between authentication and authorization, and how they work together to secure applications.

Product Updates

Cerbos Hub

Since the release of Cerbos Hub in November we have been heads-down ensuring the journey to get up and running with Cerbos in your environment is as slick as possible.

Audit Logs - Get exclusive early access:

One of the big advantages of decoupling authorization into a centralized service, are the audit logs, which are generated regardless of where in the application stack the permission checks are being made.

If you are using Cerbos Logs today, or planning to in the future, we have some new capabilities in the works which we would love to give you early access to. Reach out to our CPO, Alex Olivier, at alex@cerbos.dev to get started.

Explore Cerbos Hub

Cerbos PDP

The v0.37.0 version of Cerbos PDP adds support for autocomplete when using the Cerbos REPL, new Kubernetes deployment options and updates to the AdminAPI.

The Cerbos REPL provides auto-completion for built-in commands and files, enhancing its use for the development and debugging of policies.

In addition to variables, InspectPolicies Admin API response also includes the derived roles that are referenced in each inspected policy. It also supports restricting the results to one or more policies using their IDs. 

Kubernetes users can deploy Cerbos as a DaemonSet using the official Helm chart, reducing resource usage compared to the sidecar model.

The cerbos compile command provides better context information about YAML syntax errors in policies, and the cerbosctl inspect command can now produce output in machine-readable formats as well.

Based on user feedback, some Admin API restrictions — such as the limit on the number of policies that can be updated in a single AddOrUpdatePolicy request — have been relaxed in this release.

You can find the full release notes here: v0.37.0

Cerbos PDP is open source, check out our GitHub

Helpful Content

Navigating authentication and authorization: Harnessing the power of Microsoft Entra External ID and Cerbos for enhanced application security

Understanding and implementing efficient authentication and authorization mechanisms are crucial in building secure and scalable applications, which is why we’re excited to share the second part of our three-part series created in collaboration with Microsoft. This piece simplifies these complex processes, providing a guide for developers and software engineers on integrating Microsoft Entra External ID with Cerbos for robust authentication and fine-grained authorization in applications. 

Upcoming Events

For those of you who we met at European Identity and Cloud Conf in Berlin: thank you for stopping by and chatting with us. Your support means a lot!

We’re looking forward to the following conferences in the coming weeks:

• Visit our booth at: WeAreDevelopers World Congress in Berlin, July 17–19. Booth A46. Stop by and visit us to enter our raffle! 1st prize is a Lego Nintendo set.
• Meet our Senior DevRel Manager, Daniel Maher, who will be appearing at: DevRel Summit NYC in New York, July 18–19.