Authorization at Netflix Scale

How do you centralize authorization in the critical path of a multi-million RPS online service?  How does centralizing authorization enable product flexibility?   How do you make such a system fault-tolerant?  

We will answer these questions and more in this session. At Netflix, having many microservices each implementing their own authorization rules was starting to make our streaming product inflexible. Requirements involving changes to authorization required too much development.   We have introduced an authorization system (PACS) for user-facing applications that is resilient,  flexible and performant.  We’ll discuss our approach to  scaling and share techniques for distributed caching and isolating failure domains.  You’ll leave this talk with an idea of how to approach centralizing authorization at such a scale without compromising on availability.