AuthZed

Everyone's implementing Retrieval-Augmented Generation (RAG) and allowing AI to look at your data. But how do you make sure that LLMs and AI agents have access only to the data that they should have access to? AuthZed CEO Jacob Moshenko talks about the architecture of a secure RAG stack and how it could provide guard rails for AI in the near future #authorization #genAI #llm

Understanding the conceptual world of Authorization can be tricky. That's why we're here to explain these foundational concepts like the audience is 10 years old. Some concepts we're going to cover: - Authentication vs Authorization - Access Control Lists - Relationship Based Access Control (ReBAC) - Google Zanzibar - SpiceDB This is an office hours format and we'll be live so feel free to ask questions as well.

🔒 Introducing Sohan Maheshwar and Evan Corkrean from AuthZed, who will be leading a practical workshop at the AI Builders Summit! Sohan, Lead Developer Advocate at Authzed, has been shaping the developer space since 2013 with companies like Amazon and Fermyon. Based in the Netherlands, he’s passionate about emerging technologies and their impact. Evan, Senior Solutions Engineer at Authzed, specializes in fine-grained authorization systems and has helped architect solutions for advanced RAG applications. When he’s not diving into AI security, you’ll find him skiing or mountain biking near Denver. In their workshop, "Secure Your RAG Pipelines with Fine-Grained Authorization," you’ll learn: - Why authorization is critical for Retrieval-Augmented Generation (RAG) pipelines. - How to implement Relationship-based Access Control (ReBAC) for more precise security. - Pre- and post-filtering vector database queries with authorized object IDs to safeguard sensitive data. - Using tools like Pinecone, LangChain, OpenAI, and SpiceDB to enhance security and efficiency. This session is perfect for developers and data scientists building enterprise-ready AI systems. Gain hands-on insights into securing your RAG pipelines with the latest techniques and tools. 🎯 Don’t miss this opportunity to learn from Sohan and Evan at the AI Builders Summit. Register now: https://hubs.li/Q031VRJS0 #AI #RAG #Security #Authorization #ReBAC #AIBuildersSummit #Authzed

Thanks for the shoutout Kostya Zgara! For the uninitiated, check out our Github to get started ➡️ https://lnkd.in/ez7wBHSc

How do you deal with the dual-write problem in distributed systems? A system that uses a database for authorization and also has an application database (read: most of them) is a distributed system. The dual-write problem occurs when an application needs to write data to two different systems (in this case, a database and SpiceDB) and maintain consistency between them⁠. If a server crashes between writing to one system and the other, it can lead to an inconsistent state where the two systems disagree about the state of the world. Dealing with the dual-write problem involves a non-trivial amount of work. Some strategies include: •Do Nothing •Event Sourcing/Command-Query Responsibility Segregation (CQRS) •Durable Execution Environments •Transactional Outbox Patterns Check out Tanner Stirrat's superb article about different strategies to mitigate the dual-write problem https://lnkd.in/g86dmr7T #authZ #distributed #architecture

Your LLMs shouldn’t have access to sensitive Enterprise data! Our CEO Jake Moshenko was recently on The Cloudcast podcast talking about Authorization in the age of AI Agents. Here's your weekend listen to understand why your Enterprise AI needs security guardrails: https://lnkd.in/gRWNxA7T

AuthZed was on the The CloudCast speaking about permission systems in the age of AI, both with Agents and your RAG pipelines. "You don't want your agent that is suppose to be booking flights for you accessing HR data." - Jake Moshenko Watch the podcast here: [Link to the podcast](https://lnkd.in/g7YYGcs6)

Looking for something to learn during holiday season? How about SpiceDB? ✔️ Open Source ✔️ Global Scale ✔️ Multiple language libraries Here's a long-form video by CEO Jake Moshenko teaching you the fundamentals: https://lnkd.in/gcNmux7i

SpiceDB got a nice shoutout in The Bike Shed - a podcast about dev experiences and challenges at thoughtbot. Check out episode #450 hosted by Joel Quenneville and Stephanie Minn about their experience re-thinking authorization because of the needs of the app they're building. https://lnkd.in/ghFjMreu

You can use Amazon ECS as a deployment target for SpiceDB (but you probably shouldn't in prod!) Here's your weekend learning guide: https://lnkd.in/gTHw7BJU #aws #authorization