vercel-security-access
Compare original and translation side by side
🇺🇸
Original
English🇨🇳
Translation
ChineseVercel Security and Access Skill
Vercel安全与访问技能
progressive_disclosure: entry_point: summary: "Vercel security and access: RBAC, SSO (SAML/OIDC), deployment protection, firewall, BotID, audit logs, and 2FA." when_to_use: - "When managing access control and roles" - "When securing deployments and endpoints" - "When auditing activity and enforcing MFA" quick_start: - "Enable RBAC and role assignments" - "Configure SSO and authentication policies" - "Apply deployment protection and firewall" - "Review audit and activity logs" token_estimate: entry: 90-110 full: 4000-5200
progressive_disclosure: entry_point: summary: "Vercel安全与访问:RBAC、SSO (SAML/OIDC)、部署保护、防火墙、BotID、审计日志和2FA。" when_to_use: - "管理访问控制和角色时" - "保护部署和端点时" - "审计操作活动和强制启用MFA时" quick_start: - "启用RBAC和角色分配" - "配置SSO和认证策略" - "应用部署保护和防火墙规则" - "查看审计与操作日志" token_estimate: entry: 90-110 full: 4000-5200
Overview
概述
Vercel security features cover identity, access control, deployment protection, and threat mitigation.
Vercel安全功能覆盖身份认证、访问控制、部署保护和威胁缓解多个维度。
Access Control
访问控制
- Use RBAC to define project permissions.
- Configure SAML or OIDC for SSO.
- Require 2FA for sensitive access.
- 使用RBAC定义项目权限。
- 为SSO配置SAML或OIDC协议。
- 敏感访问场景要求启用2FA。
Deployment Protection
部署保护
- Apply deployment protection for previews and production.
- Limit access to protected deployments.
- 为预览环境和生产环境应用部署保护。
- 限制受保护部署的访问权限。
Firewall and Bot Defense
防火墙与机器人防护
- Use Vercel Firewall to manage traffic rules.
- Use BotID to mitigate automated abuse.
- 使用Vercel Firewall管理流量规则。
- 使用BotID缓解自动化恶意攻击。
Audit and Activity Logs
审计与操作日志
- Review audit logs for compliance.
- Track activity history for user actions.
- 查看审计日志满足合规要求。
- 追踪用户操作的活动历史。
Complementary Skills
配套技能
When using this skill, consider these related skills (if deployed):
- vercel-teams-billing: Team settings and account policy.
- vercel-observability: Operational visibility for security events.
Note: Complementary skills are optional. This skill is fully functional without them.
使用本技能时,若已部署以下相关技能可搭配使用:
- vercel-teams-billing:团队设置与账户策略。
- vercel-observability:安全事件的运营可见性。
注意:配套技能为可选项,无配套技能时本技能仍可完全正常使用。
Resources
资源
Vercel Docs:
- RBAC: https://vercel.com/docs/rbac
- SAML: https://vercel.com/docs/saml
- OIDC: https://vercel.com/docs/oidc
- Deployment protection: https://vercel.com/docs/deployment-protection
- Vercel Firewall: https://vercel.com/docs/vercel-firewall
- BotID: https://vercel.com/docs/botid
- Audit log: https://vercel.com/docs/audit-log
- Activity log: https://vercel.com/docs/activity-log
- Two-factor authentication: https://vercel.com/docs/two-factor-authentication
- Code owners: https://vercel.com/docs/code-owners
Vercel官方文档:
- RBAC: https://vercel.com/docs/rbac
- SAML: https://vercel.com/docs/saml
- OIDC: https://vercel.com/docs/oidc
- 部署保护: https://vercel.com/docs/deployment-protection
- Vercel Firewall: https://vercel.com/docs/vercel-firewall
- BotID: https://vercel.com/docs/botid
- 审计日志: https://vercel.com/docs/audit-log
- 操作日志: https://vercel.com/docs/activity-log
- 双因素认证: https://vercel.com/docs/two-factor-authentication
- 代码所有者: https://vercel.com/docs/code-owners