Role-Based Access Control (RBAC) Vs. Attribute-Based Access Control (ABAC) For Cloud Security

Abstract

In the ever-changing world of cloud computing, it is critical to have strong security measures in place to limit access to private information. The capacity of two well-known access control models to implement access policies in cloud environments—Role-Based Access Control RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control) have drawn a lot of interest. This research compares the capabilities, adaptability, and applicability of RBAC and ABAC for cloud security. By clearly delineating the boundaries between user responsibilities and the resources they can access, RBAC, which is conventionally based on assigning roles to users, streamlines access management. However, RBAC faces challenges in dynamic and complex cloud environments, where user attributes, contextual information, and real-time changes need to be considered. In contrast, ABAC provides a more dynamic and detailed method by assessing resource attributes, user attributes, and ambient factors in real time. Because of its adaptability, ABAC is especially well-suited for cloud environments with a variety of users and data access needs. The study also examines each model's advantages and disadvantages, emphasising situations in which one might be superior to the other. Lastly, it talks about hybrid models that provide a well-rounded approach to cloud security by combining RBAC and ABAC. The results offer important new information about the trade-offs between these two models and how well they work with contemporary cloud security systems.