vercel-security-access

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Vercel Security and Access Skill

Vercel安全与访问技能


progressive_disclosure: entry_point: summary: "Vercel security and access: RBAC, SSO (SAML/OIDC), deployment protection, firewall, BotID, audit logs, and 2FA." when_to_use: - "When managing access control and roles" - "When securing deployments and endpoints" - "When auditing activity and enforcing MFA" quick_start: - "Enable RBAC and role assignments" - "Configure SSO and authentication policies" - "Apply deployment protection and firewall" - "Review audit and activity logs" token_estimate: entry: 90-110 full: 4000-5200


progressive_disclosure: entry_point: summary: "Vercel安全与访问:RBAC、SSO (SAML/OIDC)、部署保护、防火墙、BotID、审计日志和2FA。" when_to_use: - "管理访问控制和角色时" - "保护部署和端点时" - "审计操作活动和强制启用MFA时" quick_start: - "启用RBAC和角色分配" - "配置SSO和认证策略" - "应用部署保护和防火墙规则" - "查看审计与操作日志" token_estimate: entry: 90-110 full: 4000-5200

Overview

概述

Vercel security features cover identity, access control, deployment protection, and threat mitigation.
Vercel安全功能覆盖身份认证、访问控制、部署保护和威胁缓解多个维度。

Access Control

访问控制

  • Use RBAC to define project permissions.
  • Configure SAML or OIDC for SSO.
  • Require 2FA for sensitive access.
  • 使用RBAC定义项目权限。
  • 为SSO配置SAML或OIDC协议。
  • 敏感访问场景要求启用2FA。

Deployment Protection

部署保护

  • Apply deployment protection for previews and production.
  • Limit access to protected deployments.
  • 为预览环境和生产环境应用部署保护。
  • 限制受保护部署的访问权限。

Firewall and Bot Defense

防火墙与机器人防护

  • Use Vercel Firewall to manage traffic rules.
  • Use BotID to mitigate automated abuse.
  • 使用Vercel Firewall管理流量规则。
  • 使用BotID缓解自动化恶意攻击。

Audit and Activity Logs

审计与操作日志

  • Review audit logs for compliance.
  • Track activity history for user actions.
  • 查看审计日志满足合规要求。
  • 追踪用户操作的活动历史。

Complementary Skills

配套技能

When using this skill, consider these related skills (if deployed):
  • vercel-teams-billing: Team settings and account policy.
  • vercel-observability: Operational visibility for security events.
Note: Complementary skills are optional. This skill is fully functional without them.
使用本技能时,若已部署以下相关技能可搭配使用:
  • vercel-teams-billing:团队设置与账户策略。
  • vercel-observability:安全事件的运营可见性。
注意:配套技能为可选项,无配套技能时本技能仍可完全正常使用。

Resources

资源