Pattern 97 / SECURITY

Policy Decision Point / Policy Enforcement Point

Use this when Separating authorization decisions from enforcement locations.

Pressure
Separating authorization decisions from enforcement locations
Mechanism
Centralize policy evaluation and enforce decisions at gateways, services, or data boundaries
Toll
Latency and availability of policy checks become critical
Architecture plate97
Diagram for Policy Decision Point / Policy Enforcement Point
Executive brief

Policy Decision Point / Policy Enforcement Point fits when Separating authorization decisions from enforcement locations. Mechanism: Centralize policy evaluation and enforce decisions at gateways, services, or data boundaries. Use it for Enterprise authz, multi-service platforms. The toll: Latency and availability of policy checks become critical.

Use when

Enterprise authz, multi-service platforms.

Example

Use policy decision point / policy enforcement point when enterprise authz, multi-service platforms..

Review framing

Describe the pressure first, then the mechanism, then the cost. That keeps the design grounded.

Same pressure family

Security

99Envelope Encryption
← 9698 →