# Zero Trust Architecture

Record: `arch:zero-trust-architecture`
Kind: style
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: contextual
Scope: system, network, identity
Canonical: https://banes-lab.com/ontology#arch-zero-trust-architecture

## Repair

- Refactored by: Add AuthN/AuthZ, Segment Network
- Detected by: internal endpoints without authz/authn
- Violated by: implicit trust based on network location
- Measured by: trustless control coverage
- Enforced by: [policy-as-code](https://banes-lab.com/records/arch/policy-as-code.md), gateway rules

## requires

- [Strong Identity](https://banes-lab.com/records/lex/strong-identity.md)
- [Continuous Authorization](https://banes-lab.com/records/lex/continuous-authorization.md)

## reinforces

- [Least Privilege](https://banes-lab.com/records/arch/least-privilege.md)

## enables

- [Perimeterless Security](https://banes-lab.com/records/lex/perimeterless-security.md)

## conflicts-with

- [Trusted Internal Network Assumption](https://banes-lab.com/records/lex/trusted-internal-network-assumption.md)

## tensions-with

- [Latency/Complexity](https://banes-lab.com/records/lex/latency-complexity.md)

## tensions

- [Zero Trust Architecture Latency/Complexity](https://banes-lab.com/records/tension/latency-complexity-zero-trust-architecture.md)