TME-117 - New RAG on how to extend CF access native features with ser… #17317

nouvellonsteph · 2024-10-04T13:48:47Z

…verless computing

Summary

New RAG demonstration how Cloudflare Access native capabilities can be expanded with serverlesss computing

Documentation checklist

The documentation style guide has been adhered to.

hyperlint-ai

1 files reviewed, 4 total issue(s) found.

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

cloudflare-workers-and-pages · 2024-10-04T13:54:14Z

Deploying cloudflare-docs with Cloudflare Pages

Latest commit:	`67ee6a4`
Status:	✅ Deploy successful!
Preview URL:	https://a407cec7.cloudflare-docs-7ou.pages.dev
Branch Preview URL:	https://nouvellonsteph-tme-117.cloudflare-docs-7ou.pages.dev

View logs

github-actions · 2024-10-04T13:54:33Z

Files with changes (up to 15)

Original Link	Updated Link
https://developers.cloudflare.com/reference-architecture/diagrams/sase/augment-access-with-serverless/	https://nouvellonsteph-tme-117.cloudflare-docs-7ou.pages.dev/reference-architecture/diagrams/sase/augment-access-with-serverless/

hyperlint-ai

1 files reviewed, 4 total issue(s) found.

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

hyperlint-ai

1 files reviewed, 10 total issue(s) found.

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

hyperlint-ai

1 files reviewed, 1 total issue(s) found.

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

…verless computing

Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com>

Making the sidebar menu item shorter for readability

Minor changes

hyperlint-ai

1 files reviewed, 2 total issue(s) found.

Note: We resolved prior Hyperlint review comments because:

We updated our inline suggestion AI.

We do this to avoid keeping outdated or irrelevant comments around. We'll leave a new review with current comments below.

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

…access-with-serverless.mdx Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com>

Fixing links

securitypedant

Awesome new reference architecture

bllchmbrs · 2024-10-10T16:22:07Z

Hey @nouvellonsteph , Hyperlint developer here. Something unexpected is going on with this PR. I'm looking at it now and will edit this comment with more information.

Edit 1: The outstanding issue that Hyperlint has on this PR is a Terms-error. It can safely be ignored as it refers to a pedantic issue about JSON being capitalized in the URL, based on your URL configuration.

I am working on resolving this issue now to get you to ✅

Edit 2: would you mind emailing [email protected] I have a small follow up question.

hyperlint-ai

1 files reviewed, 1 total issue(s) found.

hyperlint-ai · 2024-10-10T16:41:46Z

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

+}
+```
+
+Cloudflare exposes a specific [endpoint](/cloudflare-one/identity/authorization-cookie/validating-json/#_top) to allow anyone to validate and expand a Cloudflare signed JWT.


Suggested change

Cloudflare exposes a specific [endpoint](/cloudflare-one/identity/authorization-cookie/validating-json/#_top) to allow anyone to validate and expand a Cloudflare signed JWT.

Cloudflare exposes a specific [endpoint](/cloudflare-one/identity/authorization-cookie/validating-json/#_top) to allow anyone to validate and expand a Cloudflare signed JWT.

Issues:

Style Guide - (Terms-error) Use 'JSON' instead of 'json'.

Fix Explanation:

The term 'json' should be capitalized to 'JSON' to adhere to standard style guides for acronyms. This change ensures consistency and professionalism in the documentation.

@nouvellonsteph , resolving this comment will give you the ✅!

As mentioned above, it'd be helpful to email support @ hyperlint. I've got a quick question or two that's just not relevant for this PR.

Please ping me directly on GH with any other questions or concerns!

@bllchmbrs Thanks so much for reaching out about this! I'm the PM for the PCX team and I'll email you shortly to see if I can get you the info you're after.

haleycode

Some minor comments here for clarity and flow but approved!

haleycode · 2024-10-10T17:13:00Z

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

+
+## Introduction
+
+Companies using Zero Trust Network Access (ZTNA) services build policies to determine if a user can access a protected resource such as a privately hosted Wiki server or source code repository. Policies typically use group membership, authentication methods, device security posture to determine which users can access which resources. 


Suggested change

Companies using Zero Trust Network Access (ZTNA) services build policies to determine if a user can access a protected resource such as a privately hosted Wiki server or source code repository. Policies typically use group membership, authentication methods, device security posture to determine which users can access which resources.

Companies use Zero Trust Network Access (ZTNA) services to build policies to determine if a user can access protected resources such as privately hosted wiki servers or source code repositories. Policies typically use group membership, authentication methods or device security posture to determine which users can access which resources.

haleycode · 2024-10-10T17:24:49Z

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

+
+Secure access requires a range of attributes being available to the policy engine for evaluation. With Cloudflare's ZTNA service, [Access](/cloudflare-one/policies/access/), it is possible to include in the policy an external request to another API that provides part of the data required for the access decision. 
+
+For example, you might have a policy which states all members of the group "Engineers", who have authenticated with credentials that required a hard token, can have access to the self-hosted source code repository. But you also want to only allow engineers who have completed security training. That data might be available in another system, so Cloudflare allows you to, as part of the policy check, make a call using [Workers](https://workers.cloudflare.com/) to the training system to determine if this user has passed security training.


Suggested change

For example, you might have a policy which states all members of the group "Engineers", who have authenticated with credentials that required a hard token, can have access to the self-hosted source code repository. But you also want to only allow engineers who have completed security training. That data might be available in another system, so Cloudflare allows you to, as part of the policy check, make a call using [Workers](https://workers.cloudflare.com/) to the training system to determine if this user has passed security training.

For example, you might have a policy which states all members of the group "Engineers", who have authenticated with credentials that required a hard token, can have access to the self-hosted source code repository. But you also want to only allow engineers who have completed security training. That data might be available in another system, so as part of the policy check, Cloudflare allows you to make a call to the training system using [Workers](https://workers.cloudflare.com/) to determine if a user has passed security training.

haleycode · 2024-10-10T17:26:01Z

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx

+</RelatedProduct>
+
+<RelatedProduct header="Access" href="/cloudflare-one/" product="cloudflare-one">
+    Cloudflare Zero Trust replaces legacy security perimeters with Cloudflare's global network, making the Internet faster and safer for teams around the world


Suggested change

Cloudflare Zero Trust replaces legacy security perimeters with Cloudflare's global network, making the Internet faster and safer for teams around the world

Cloudflare Zero Trust replaces legacy security perimeters with Cloudflare's global network, making the Internet faster and safer for teams around the world.

#17317) * TME-117 - New RAG on how to extend CF access native features with serverless computing * Apply suggestions from code review Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com> * Update augment-access-with-serverless.mdx Making the sidebar menu item shorter for readability * Update augment-access-with-serverless.mdx Minor changes * Update src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com> * Update augment-access-with-serverless.mdx Fixing links --------- Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com> Co-authored-by: Simon Thorpe <[email protected]>

nouvellonsteph requested review from securitypedant, crwaters16 and a team as code owners October 4, 2024 13:48

github-actions bot assigned crwaters16 and securitypedant Oct 4, 2024

github-actions bot added size/m product:reference-architecture labels Oct 4, 2024

hyperlint-ai bot reviewed Oct 4, 2024

View reviewed changes

nouvellonsteph force-pushed the nouvellonsteph/TME-117 branch from 612c6d1 to 3101f57 Compare October 4, 2024 13:58

hyperlint-ai bot reviewed Oct 4, 2024

View reviewed changes

nouvellonsteph force-pushed the nouvellonsteph/TME-117 branch 5 times, most recently from d271e91 to 62b6cc4 Compare October 10, 2024 08:57

github-actions bot added size/l and removed size/m labels Oct 10, 2024

hyperlint-ai bot reviewed Oct 10, 2024

View reviewed changes

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx Show resolved Hide resolved

TME-117 - New RAG on how to extend CF access native features with ser…

c4c4d4f

…verless computing

nouvellonsteph force-pushed the nouvellonsteph/TME-117 branch from 8a9b31a to c4c4d4f Compare October 10, 2024 09:05

nouvellonsteph and others added 3 commits October 10, 2024 11:10

Apply suggestions from code review

2ad5698

Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com>

Update augment-access-with-serverless.mdx

6e7ed14

Making the sidebar menu item shorter for readability

Update augment-access-with-serverless.mdx

29ce43d

Minor changes

hyperlint-ai bot reviewed Oct 10, 2024

View reviewed changes

src/content/docs/reference-architecture/diagrams/sase/augment-access-with-serverless.mdx Outdated Show resolved Hide resolved

securitypedant and others added 2 commits October 10, 2024 08:54

Update src/content/docs/reference-architecture/diagrams/sase/augment-…

11cde7a

…access-with-serverless.mdx Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com>

Update augment-access-with-serverless.mdx

67ee6a4

Fixing links

securitypedant approved these changes Oct 10, 2024

View reviewed changes

hyperlint-ai bot reviewed Oct 10, 2024

View reviewed changes

nouvellonsteph merged commit ab965e7 into production Oct 10, 2024
12 of 13 checks passed

nouvellonsteph deleted the nouvellonsteph/TME-117 branch October 10, 2024 17:20

haleycode approved these changes Oct 10, 2024

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

TME-117 - New RAG on how to extend CF access native features with ser… #17317

TME-117 - New RAG on how to extend CF access native features with ser… #17317

nouvellonsteph commented Oct 4, 2024 •

edited

Loading

hyperlint-ai bot left a comment

cloudflare-workers-and-pages bot commented Oct 4, 2024 •

edited

Loading

github-actions bot commented Oct 4, 2024

hyperlint-ai bot left a comment

hyperlint-ai bot left a comment

hyperlint-ai bot left a comment

hyperlint-ai bot left a comment •

edited

Loading

securitypedant left a comment

bllchmbrs commented Oct 10, 2024 •

edited

Loading

hyperlint-ai bot left a comment

hyperlint-ai bot Oct 10, 2024

bllchmbrs Oct 10, 2024

haleycode Oct 10, 2024

haleycode left a comment

haleycode Oct 10, 2024

haleycode Oct 10, 2024

haleycode Oct 10, 2024

	Cloudflare exposes a specific [endpoint](/cloudflare-one/identity/authorization-cookie/validating-json/#_top) to allow anyone to validate and expand a Cloudflare signed JWT.
	Cloudflare exposes a specific [endpoint](/cloudflare-one/identity/authorization-cookie/validating-json/#_top) to allow anyone to validate and expand a Cloudflare signed JWT.


		## Introduction

		Companies using Zero Trust Network Access (ZTNA) services build policies to determine if a user can access a protected resource such as a privately hosted Wiki server or source code repository. Policies typically use group membership, authentication methods, device security posture to determine which users can access which resources.

	Companies using Zero Trust Network Access (ZTNA) services build policies to determine if a user can access a protected resource such as a privately hosted Wiki server or source code repository. Policies typically use group membership, authentication methods, device security posture to determine which users can access which resources.
	Companies use Zero Trust Network Access (ZTNA) services to build policies to determine if a user can access protected resources such as privately hosted wiki servers or source code repositories. Policies typically use group membership, authentication methods or device security posture to determine which users can access which resources.


		Secure access requires a range of attributes being available to the policy engine for evaluation. With Cloudflare's ZTNA service, [Access](/cloudflare-one/policies/access/), it is possible to include in the policy an external request to another API that provides part of the data required for the access decision.

		For example, you might have a policy which states all members of the group "Engineers", who have authenticated with credentials that required a hard token, can have access to the self-hosted source code repository. But you also want to only allow engineers who have completed security training. That data might be available in another system, so Cloudflare allows you to, as part of the policy check, make a call using [Workers](https://workers.cloudflare.com/) to the training system to determine if this user has passed security training.

	Cloudflare Zero Trust replaces legacy security perimeters with Cloudflare's global network, making the Internet faster and safer for teams around the world
	Cloudflare Zero Trust replaces legacy security perimeters with Cloudflare's global network, making the Internet faster and safer for teams around the world.

TME-117 - New RAG on how to extend CF access native features with ser… #17317

TME-117 - New RAG on how to extend CF access native features with ser… #17317

Conversation

nouvellonsteph commented Oct 4, 2024 • edited Loading

Summary

Documentation checklist

hyperlint-ai bot left a comment

Choose a reason for hiding this comment

cloudflare-workers-and-pages bot commented Oct 4, 2024 • edited Loading

Deploying cloudflare-docs with Cloudflare Pages

github-actions bot commented Oct 4, 2024

hyperlint-ai bot left a comment

Choose a reason for hiding this comment

hyperlint-ai bot left a comment

Choose a reason for hiding this comment

hyperlint-ai bot left a comment

Choose a reason for hiding this comment

hyperlint-ai bot left a comment • edited Loading

Choose a reason for hiding this comment

securitypedant left a comment

Choose a reason for hiding this comment

bllchmbrs commented Oct 10, 2024 • edited Loading

hyperlint-ai bot left a comment

Choose a reason for hiding this comment

hyperlint-ai bot Oct 10, 2024

Choose a reason for hiding this comment

bllchmbrs Oct 10, 2024

Choose a reason for hiding this comment

haleycode Oct 10, 2024

Choose a reason for hiding this comment

haleycode left a comment

Choose a reason for hiding this comment

haleycode Oct 10, 2024

Choose a reason for hiding this comment

haleycode Oct 10, 2024

Choose a reason for hiding this comment

haleycode Oct 10, 2024

Choose a reason for hiding this comment

nouvellonsteph commented Oct 4, 2024 •

edited

Loading

cloudflare-workers-and-pages bot commented Oct 4, 2024 •

edited

Loading

hyperlint-ai bot left a comment •

edited

Loading

bllchmbrs commented Oct 10, 2024 •

edited

Loading