Managing Constraints at Scale

Scale is a huge challenge for large organizations. Having all these policies in the library obviously makes it easy to compose them together when you have different parts of a system that you want to apply restrictions to. The thing with constraints is that they are attenuative. This is helpful if you have a get pipe line where you may literally be combining these policies. You now know, if i am like bringing in a bunch of constraints from like department b, and mashing them together with department c, bees and ss constraint like cs policies are not at risk. Bees policies aren't at risk of this sort of short circuiting effect. Beriht, this is one small change, the proverbial