Skip to main content
CPEBuddy
LabStore - Part 4 - Building an Object Store in Go: IAM - Identity and Access Management

LabStore - Part 4 - Building an Object Store in Go: IAM - Identity and Access Management

Source: YouTube · Data Lab Tech · published Dec 23, 2025 · 56:31

Identity & Access Management
No ratings yet Log in to rate
Transcript Available
Description

This video demonstrates how to build an Identity and Access Management (IAM) service for Lab Store using Go and SQLite, covering performance optimization, secure secret handling, and concurrency 0:00.

Key Takeaways:
• The IAM service manages core security principals including users, groups, and policies that dictate which resources are allowed or denied access 0:45.
• The architecture utilizes specific SQLite pragmas and design patterns to ensure the database performs efficiently for the MVP 0:13.
• Sensitive data is secured through symmetric encryption using AES-GCM for proper secret management 0:24.
• Go's buffered channels are leveraged to effectively handle concurrency within the application 0:20.
• Custom JSON marshaler implementations were developed to solve specific data serialization challenges that arose during the build process 0:26.

This walkthrough provides a practical, code-level look at building a secure and performant IAM system from scratch using modern Go practices and lightweight database tooling.

Sources:

  • 0:00 Introduction to the IAM service build and tech stack
  • 0:13 SQLite pragmas and MVP performance patterns
  • 0:20 Concurrency handling with Go buffered channels
  • 0:24 Symmetric encryption using AES-GCM
  • 0:45 Definition of IAM components (users, groups, policies)

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Hey guys and welcome back to the lab. Today I'm going to show you how I built an IM service for lab store in Go on top of SQLite covering everything from config handling to proper secret encryption. We'll look into which actions I picked for the MVP, which SQLite pragmas and patterns I used to ensure performance, and we'll even cover a few interesting details on concurrency using buffer channels in Go, a few details on symmetric encryption based on ASGCM, and even some cool JSON Marshley implementations that arose during development. Let's dive right in. So, IM stands for identity and access management and it's the place where you go to manage your users, groups and policies. The policies will determine which resources your users or groups have access to or are denied access to and these a…