Homelab Academy / Modules
Independent application with evidence.
Module: Edge Access & VPN
Activity type: Homework / independent application
Objective: Explain the difference between identification, authentication, authorization, and accounting.
Draw an access-control matrix for three homelab roles, at least four resources, and at least five actions. Mark every cell as explicitly allowed or denied.
Extend the design on paper with a resource environment attribute such as development or production. State how an operator assigned to development is denied operations on production resources.
Write a session policy covering idle timeout, absolute lifetime, revocation after role changes, reauthentication for sensitive actions, and emergency invalidation.
Create an audit-event specification listing required fields, prohibited secret fields, retention expectations, and which event types should alert an administrator.
Threat-model account recovery by identifying assets, actors, entry points, likely abuse cases, preventive controls, and audit evidence.
Compare RBAC and ABAC for a homelab containing human administrators, automation services, monitoring agents, and guest users. Recommend where each model is appropriate.