{ "type": "excalidraw", "version": 2, "source": "https://excalidraw.com", "elements": [ { "id": "r501606610", "type": "rectangle", "x": 40, "y": 95, "width": 230, "height": 74, "angle": 0, "strokeColor": "#e8870c", "backgroundColor": "#fff8ef", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1981848460, "versionNonce": 1343843736, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t450170547", "type": "text", "x": 50, "y": 103, "width": 40, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1982910689, "versionNonce": 1916956474, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "VPN", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "VPN", "lineHeight": 1.25, "baseline": 14 }, { "id": "r1400197030", "type": "rectangle", "x": 330, "y": 95, "width": 230, "height": 74, "angle": 0, "strokeColor": "#2f6db5", "backgroundColor": "#eef4fb", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1803136315, "versionNonce": 403337544, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1751801453", "type": "text", "x": 340, "y": 103, "width": 123.20000000000002, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 280948075, "versionNonce": 1708126988, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "trusted intranet", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "trusted intranet", "lineHeight": 1.25, "baseline": 14 }, { "id": "r1110117343", "type": "rectangle", "x": 620, "y": 95, "width": 230, "height": 74, "angle": 0, "strokeColor": "#111111", "backgroundColor": "#ffffff", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 722165757, "versionNonce": 734535184, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1781464780", "type": "text", "x": 630, "y": 103, "width": 84.7, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1114562512, "versionNonce": 168613571, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "any service", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "any service", "lineHeight": 1.25, "baseline": 14 }, { "id": "r1309890118", "type": "rectangle", "x": 40, "y": 320, "width": 200, "height": 86, "angle": 0, "strokeColor": "#2f6db5", "backgroundColor": "#eef4fb", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 74159327, "versionNonce": 107149161, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1628081228", "type": "text", "x": 50, "y": 328, "width": 100.10000000000001, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1781075666, "versionNonce": 108646274, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "User / device", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "User / device", "lineHeight": 1.25, "baseline": 14 }, { "id": "r1645499131", "type": "rectangle", "x": 290, "y": 315, "width": 230, "height": 96, "angle": 0, "strokeColor": "#999999", "backgroundColor": "#ffffff", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1881932508, "versionNonce": 1080147888, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t949163079", "type": "text", "x": 300, "y": 323, "width": 123.20000000000002, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1529729467, "versionNonce": 913444713, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "IAP / Auth proxy", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "IAP / Auth proxy", "lineHeight": 1.25, "baseline": 14 }, { "id": "t83608425", "type": "text", "x": 300, "y": 343, "width": 114.95, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1873359303, "versionNonce": 1167851237, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "who? where? device?", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "who? where? device?", "lineHeight": 1.25, "baseline": 11 }, { "id": "t1686095121", "type": "text", "x": 300, "y": 358, "width": 114.95, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 753449609, "versionNonce": 519779288, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "MFA, posture checks", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "MFA, posture checks", "lineHeight": 1.25, "baseline": 11 }, { "id": "r1476480642", "type": "rectangle", "x": 570, "y": 315, "width": 230, "height": 96, "angle": 0, "strokeColor": "#e8870c", "backgroundColor": "#fff8ef", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 260594825, "versionNonce": 1656435081, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1110907757", "type": "text", "x": 580, "y": 323, "width": 100.10000000000001, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 277333944, "versionNonce": 1603779898, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "Policy engine", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "Policy engine", "lineHeight": 1.25, "baseline": 14 }, { "id": "t1206121655", "type": "text", "x": 580, "y": 343, "width": 121.00000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1031508579, "versionNonce": 1013092876, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "per-request decision", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "per-request decision", "lineHeight": 1.25, "baseline": 11 }, { "id": "t953691299", "type": "text", "x": 580, "y": 358, "width": 78.65, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 565310493, "versionNonce": 1782492450, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "(OPA / Cedar)", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "(OPA / Cedar)", "lineHeight": 1.25, "baseline": 11 }, { "id": "r541523532", "type": "rectangle", "x": 850, "y": 315, "width": 250, "height": 96, "angle": 0, "strokeColor": "#111111", "backgroundColor": "#ffffff", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 240913737, "versionNonce": 125894491, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t873108758", "type": "text", "x": 860, "y": 323, "width": 53.900000000000006, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1099979741, "versionNonce": 1897340936, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "Service", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "Service", "lineHeight": 1.25, "baseline": 14 }, { "id": "t794274295", "type": "text", "x": 860, "y": 343, "width": 127.05000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1510572626, "versionNonce": 1423621874, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "accepts only requests", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "accepts only requests", "lineHeight": 1.25, "baseline": 11 }, { "id": "t196020899", "type": "text", "x": 860, "y": 358, "width": 133.10000000000002, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1181911730, "versionNonce": 1532424340, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "carrying a valid claim", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "carrying a valid claim", "lineHeight": 1.25, "baseline": 11 }, { "id": "a1479629580", "type": "arrow", "x": 270, "y": 132, "width": 60, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 338695666, "versionNonce": 1343138877, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 60, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "a1652452867", "type": "arrow", "x": 560, "y": 132, "width": 60, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1322533060, "versionNonce": 460722387, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 60, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "a1325462621", "type": "arrow", "x": 240, "y": 360, "width": 50, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1808541057, "versionNonce": 460095186, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 50, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "a454429283", "type": "arrow", "x": 520, "y": 360, "width": 50, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 118223591, "versionNonce": 660585103, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 50, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "a400030526", "type": "arrow", "x": 800, "y": 360, "width": 50, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1253699587, "versionNonce": 1622724351, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 50, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "a966224970", "type": "arrow", "x": 1100, "y": 360, "width": 60, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "dashed", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1580661580, "versionNonce": 1106789737, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 60, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t1376997904", "type": "text", "x": 1130.0, "y": 346.0, "width": 40, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1472816250, "versionNonce": 921359662, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "repeat", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "repeat", "lineHeight": 1.25, "baseline": 11 }, { "id": "t1018489896", "type": "text", "x": 445, "y": 70, "width": 178.20000000000002, "height": 15.0, "angle": 0, "strokeColor": "#9b1c1c", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 470908283, "versionNonce": 433388586, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "Old model (perimeter trust)", "fontSize": 12, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "Old model (perimeter trust)", "lineHeight": 1.25, "baseline": 12 }, { "id": "t644253071", "type": "text", "x": 445, "y": 180, "width": 332.75, "height": 13.75, "angle": 0, "strokeColor": "#9b1c1c", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 693337322, "versionNonce": 194101723, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "in once \u2192 trusted forever \u2192 lateral movement is trivial", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "in once \u2192 trusted forever \u2192 lateral movement is trivial", "lineHeight": 1.25, "baseline": 11 }, { "id": "t110714768", "type": "text", "x": 500, "y": 290, "width": 105.60000000000001, "height": 15.0, "angle": 0, "strokeColor": "#006e6e", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 441420673, "versionNonce": 924568400, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "Zero-trust model", "fontSize": 12, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "Zero-trust model", "lineHeight": 1.25, "baseline": 12 }, { "id": "t1127348529", "type": "text", "x": 600, "y": 430, "width": 877.8000000000001, "height": 15.0, "angle": 0, "strokeColor": "#2f6db5", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1023060518, "versionNonce": 818880195, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "mTLS + SPIFFE identity inside the cluster \u00b7 IAP at the edge \u00b7 AuthorizationPolicy per workload \u2014 a breach in one service buys nothing", "fontSize": 12, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "mTLS + SPIFFE identity inside the cluster \u00b7 IAP at the edge \u00b7 AuthorizationPolicy per workload \u2014 a breach in one service buys nothing", "lineHeight": 1.25, "baseline": 12 } ], "appState": { "viewBackgroundColor": "#ffffff", "gridSize": null }, "files": {} }