Zero-Trust Network
Zero-trust access: identity + device posture + policy engine + PEP at each app.
Rendering…
Make it your own.
{
"nodes": [
{ "id":"u","type":"user","label":"User\n(any device)","x":40,"y":220 },
{ "id":"id","type":"aws-iam","label":"Identity","x":220,"y":80 },
{ "id":"dev","type":"hexagon","label":"Device\nposture","x":220,"y":220,"fill":"#fef3c7" },
{ "id":"pol","type":"diamond","label":"Policy\nengine","x":400,"y":160 },
{ "id":"pep1","type":"hexagon","label":"PEP","x":600,"y":80,"fill":"#fef3c7" },
{ "id":"pep2","type":"hexagon","label":"PEP","x":600,"y":220,"fill":"#fef3c7" },
{ "id":"pep3","type":"hexagon","label":"PEP","x":600,"y":360,"fill":"#fef3c7" },
{ "id":"a1","type":"aws-apigw","label":"App A","x":780,"y":80 },
{ "id":"a2","type":"aws-apigw","label":"App B","x":780,"y":220 },
{ "id":"a3","type":"aws-apigw","label":"App C","x":780,"y":360 },
{ "id":"audit","type":"aws-s3","label":"Audit log","x":400,"y":360,"bold":true }
],
"edges": [
{ "id":"a","source":"u","target":"id","thickness":2 },
{ "id":"b","source":"u","target":"dev","thickness":2 },
{ "id":"c","source":"id","target":"pol" },
{ "id":"d","source":"dev","target":"pol" },
{ "id":"e","source":"pol","target":"pep1","label":"allow / deny" },
{ "id":"f","source":"pol","target":"pep2","label":"allow / deny" },
{ "id":"g","source":"pol","target":"pep3","label":"allow / deny" },
{ "id":"h","source":"pep1","target":"a1" },
{ "id":"i","source":"pep2","target":"a2" },
{ "id":"j","source":"pep3","target":"a3" },
{ "id":"k","source":"pol","target":"audit","style":"dashed" }
]
}