The Invisible Fortress: Embedding Zero-Trust Governance in the Supergraph
summary
Claims a concrete pipeline: a six-step governance workflow (discovery, dictionary, classification, automation, continuous review, enforcement) that turns schema-first supergraphs into a live risk map. Implements schema generation with custom federation directives, a router that calls policy engines or subsystems (Apollo plugins cited), and runtime evaluation that can allow, redact, or block fields like tax ID PII. Requires upfront human classification but yields automated approvals, faster feedback loops, point-in-time router enforcement and auditable change trails.
AI-written summary · about
chapters (9)
- 0:00Introduction to talk
- 1:04Supergraph governance challenges
- 3:12Security and risk concerns
- 5:22Data protection in finance
- 8:53Mindset shift for security
- 11:42Six-step governance process
- 16:54Automated assurance benefits
- 21:25Investment vs speed trade-off
- 23:31Closing remarks
related talks
25mHuman in the Loop: Governing API Evolution in the Age of Agents
01h 05mWorkshop: Scaling and Securing API Development with a GraphQL Platform
20mAdvanced GraphQL Security with AI-Driven Threat Detection
39mOn Establish a Production Zero Trust Architecture
27mSupergraph AuthZ Security in Apollo Router with External Co-processing
45mZero Trust: Getting to Step One..and What to Do When You Get There
22mBuilding Secure AI Platform Infrastructure: A Zero Trust Framework
43mThe Chain of Command: Building Trust Across Public Sector Software Pipelines