slug: istio
provider: Istio
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Banking & Capital Markets
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 2
edges:
- tag: AuthorizationPolicy
  spec_file: istio-authorizationpolicy-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.75
  evidence: 'POST /namespaces/{namespace}/authorizationpolicies  createAuthorizationPolicy; schemas: AuthorizationRule'
  reason: Service-mesh authorization policies define access control rules for service-to-service traffic
    — access management / security controls, arguably also security architecture. IAM chosen as closest.
- tag: Telemetry
  spec_file: istio-telemetry-api-openapi.yml
  capability_id: BC-4220.20
  capability_id_l1: BC-4220
  capability_name: Observability Management
  confidence: 0.72
  evidence: '"Istio Create a Telemetry resource"; vendor "provid[es] visibility into the traffic flowing
    between services"'
  reason: The Telemetry CRD configures metrics, logs and traces emitted by mesh proxies, which is observability
    of the running service.