Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Feature Request]: Add a basic doc explaining Beam's security model #30911

Open
1 of 16 tasks
aaltay opened this issue Apr 9, 2024 · 1 comment
Open
1 of 16 tasks

[Feature Request]: Add a basic doc explaining Beam's security model #30911

aaltay opened this issue Apr 9, 2024 · 1 comment
Labels
awaiting triage new feature P3 website

Comments

@aaltay
Copy link
Member

aaltay commented Apr 9, 2024

What would you like to happen?

Explain a few concepts like:

  • Beam allows users to run arbitrary code. And Beam does not have different code privilege levels. (Because of that some code execution vulnerabilities will be normal within Beam's model.)
  • Beam work with different runners. Runners security models will apply in the execution environment (e.g. cluster models might allow resource access across running jobs.) (Because of that runner related security issues will be best addressed with the specific runners.)
  • ...

Issue Priority

Priority: 3 (nice-to-have improvement)

Issue Components

  • Component: Python SDK
  • Component: Java SDK
  • Component: Go SDK
  • Component: Typescript SDK
  • Component: IO connector
  • Component: Beam YAML
  • Component: Beam examples
  • Component: Beam playground
  • Component: Beam katas
  • Component: Website
  • Component: Spark Runner
  • Component: Flink Runner
  • Component: Samza Runner
  • Component: Twister2 Runner
  • Component: Hazelcast Jet Runner
  • Component: Google Cloud Dataflow Runner
@aaltay
Copy link
Member Author

aaltay commented Apr 9, 2024

/cc @damccorm @tvalentyn - FYI as this relates to an email discussion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
awaiting triage new feature P3 website
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@aaltay