Security Access Control

⬢ ระดับ 2เทคนิค

สูง

ผลกระทบต่อเงินเดือน

5 เดือน

เวลาในการเรียนรู้

ยาก

ระดับความยาก

อาชีพ

ภาพรวม

Access control is the discipline of managing who can access what resources, when, and under what conditions. Includes identity management, OAuth/SAML, RBAC/ABAC, API security, and compliance frameworks. Used by security engineers, architects, DevOps. Salary band: USD 120k–210k. Learn in 5–6 months. Adjacent to Kubernetes RBAC, Vault, zero-trust architecture.

Security Access Control คืออะไร

Security Access Control is the practice of defining, implementing, and enforcing who can access what resources (files, APIs, databases, infrastructure) when, under what conditions, and what they can do once they have access. It encompasses identity management (user accounts), authentication (login, MFA), authorization (permissions and roles), and policy enforcement (least-privilege, audit trails). Access control spans from low-level file permissions to high-level organizational policy. A complete access control system includes identity providers (Okta, Azure AD), authorization layers (OAuth, SAML), role-based access control (RBAC), attribute-based access control (ABAC), policy enforcement (Open Policy Agent), and audit logging.

🔧 เครื่องมือและระบบนิเวศ

OAuth 2.0 / OIDCSAML 2.0Kubernetes RBACHashiCorp VaultAWS IAMLDAP/Active DirectoryIdentity & Access Management (Okta, Auth0)rego/Open Policy Agent

💰 เงินเดือนตามภูมิภาค

ภูมิภาค	เจ้าหน้าที่จูเนียร์	ระดับกลาง	เจ้าหน้าที่อาวุโส
USA	$95k	$155k	$230k
UK	$55k	$95k	$160k
EU	$65k	$110k	$170k
CANADA	$90k	$145k	$210k

🎓 ใบรับรอง

CISSP (Certified Information Systems Security Professional)AWS Certified Security Specialty

🎯 อาชีพที่ใช้ Security Access Control

Database Administrator

❓ คำถามที่พบบ่อย

What's the difference between authentication and authorization?

Authentication verifies who you are (login credentials). Authorization determines what you can do (permissions/roles). A user is authenticated (you are who you claim to be), then authorized (you can access this resource).

Should I use OAuth or SAML?

OAuth 2.0 is for delegated authorization (third-party app access). SAML 2.0 is for enterprise SSO. For modern apps, use OAuth/OIDC. SAML is legacy but still used in enterprises. Many platforms support both.

What's the difference between RBAC and ABAC?

RBAC (Role-Based Access Control) grants permissions based on roles (Admin, User, Viewer). ABAC (Attribute-Based Access Control) is more flexible: grants based on attributes (department, seniority, IP address, time). ABAC is more powerful but complex.

How do I implement least-privilege access?

Start by inventorying all resources and permissions. Assign the minimum permissions needed for each role. Regularly audit who has what access. Remove unused permissions quarterly. Use time-limited credentials where possible.

What's zero-trust access control?

Zero-trust assumes all users and devices are untrusted by default. Access is granted based on identity verification, device posture, network location, and continuous monitoring, not based on network perimeter.