SecurePG is a Java-based tool that allows policy administrators to generate, verify and enforce abstract Access Control (AC) policies in two of the most widely used Cloud Service Providers: Amazon AWS and OpenStack.
The framework enables:
Policy Generation. Permissions specification through a high-level language that allows cloud developers to express access control requirements as a provider-independent, semi-column separated list of sentences (parsed with an ANTLR grammar). Policy authoring through hints and interactive advices.
Policy Verification. Use of the SMT-based tool (ref. here - paper available in FBK/ST), that implements the Content-based Protection and Release (CPR) AC model, to analyse the authorizations before the enforcement in the cloud.
Policy Enforcement. Push button technology to enforce the entities and their permissions in pre-existing AWS environments.
In version 1.0, support is currently limited to the AWS IAM and S3 services and the corresponding services of OpenStack: Keystone and Swift. [UPD] Version 2.0 extends the support to AWS IoT and edge-oriented applications.
The tool is available here on request. Please, send an email to Umberto Morelli or Silvio Ranise to unlock the access.