Restrict index lifecycle operations (create, delete, replace, or re-point an endpoint or alias) to privileged identities using fine-grained access controls.
Enforce Role-Based Index Lifecycle Management
CCC.Vector.CN02 · Access Control
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Vector.CP02 | Vector Indexing | The service may be configured to build indexes optimized for similarity search, such as HNSW, IVF, or product-quantized structures, with user-selected algorithm and tuning parameters. |
| CCC.Core.CP06 | Access Control | The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes. |
| CCC.Core.CP14 | API Access | The service exposes a port enabling external actors to interact programmatically with the service and its resources using HTTP protocol methods such as GET, POST, PUT, and DELETE. |
| CCC.Core.CP05 | Signed URLs | The service can generate an ad hoc URL containing authentication information to enforce user-configured permissions for accessing a specific component or a child resource. |
| CCC.Core.CP23 | Network Access Rules | The service restricts access to child or networked resources based on user-defined network parameters such as IP address, protocol, port, or source. |
| CCC.Core.CP29 | Active Ingestion | While running, the service itself can fetch or reach out to some other service or external source to get data, inputs or commands for the service to process or operate on. |
| CCC.Core.CP33 | Public Access Restriction | The service may be configured to deny all access to a child resource from the public internet, regardless of any resource-level permission that would otherwise grant it. |
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Vector.TH04 | Queries are Served from a Replaced or Stale Index | The index behind a query endpoint or alias may be swapped, redeployed, or re-pointed by an identity with excess permissions, or rebuilt from a stale or poisoned source. Queries are answered from an index whose contents were not reviewed, and the change is not visible to consuming applications. Integrity and availability of search results are compromised. |
| CCC.Core.TH01 | Access is Granted to Unauthorized Users | Logic designed to give different permissions to different entities may be misconfigured or manipulated, allowing unauthorized entities to access restricted parts of the service, its data, or its child resources. This could result in a loss of data confidentiality or tolerance of unauthorized actions which impact the integrity and availability of resources and data. |
Assessment Requirements
| ID | Text | Applicability |
|---|---|---|
| CCC.Vector.CN02.AR01 | When a query endpoint or alias is re-pointed to a different index, the service MUST require a permission distinct from the permission to write documents to the index. | tlp-clear, tlp-green, tlp-amber, tlp-red |
Guideline Mappings
| Framework | ID | Remarks |
|---|---|---|
| FINOS-AIGF | AIR-PREV-012 | Role-Based Access Control for AI Data |