Authorized Resource

Go to Terms and Definitions

An Authorized Resource is a resource for which an identified actor or process has permission to perform one or more specified operations.

The resource may include:

• A file
• A directory
• An Artifact
• An Infrastructure Configuration
• A Machine Image
• A data set
• A repository
• A computing resource
• A storage resource
• A network resource
• A service
• A removable storage device

Authorization applies within a defined context. The authorization may identify:

• The authorized actor or process
• The authorized resource
• The permitted operation
• The applicable purpose
• The permitted source or destination
• The effective period
• The applicable conditions
• The authorizing authority

Permitted operations may include:

• Access
• Read
• Create
• Modify
• Execute
• Copy
• Transfer
• Deploy
• Delete

A resource does not become authorized merely because an actor can technically access it. Authorization requires permission granted through an applicable authority, policy, role, rule, or decision.

resource for which an identified actor or process has permission to perform specified operations under defined conditions

Dido Solutions, Inc. and Jackrabbit Consulting, Inc.

Authorization may differ among actors, processes, operations, purposes, environments, and periods.

A resource authorized for reading is not necessarily authorized for modification, execution, transfer, or deletion.

Authorization does not by itself establish that the resource is:

• Authentic
• Accurate
• Approved
• Compliant
• Free from malicious content
• Suitable for the intended operation

Separate controls establish those characteristics.

A deployment process has permission to retrieve an identified Machine Image from a designated repository and deploy it within a specified Infrastructure Environment. The Machine Image is an Authorized Resource for that process and deployment operation.