Cloudinary Media Developer key terms

A supported collection of relevant upload defaults and restrictions whose security depends on actual scope, permissions and business authorization.

Processing applied to the relevant uploaded source before storage under its supported configuration, distinct from preparing a separately delivered derivative.

Preparation of a derived representation within a supported processing workflow, whose asynchronous form requires completion evidence before readiness is assumed.

Asset information governed by defined field types and validation, distinct from every free-form contextual value or arbitrary search tag.

A resizing/cropping arrangement targeting a specified box under its supported mode, with retained-region choice depending on the actual gravity and source.

A supported qualifier selecting relevant image regions using its actual detection/selection logic, not an implicit behavior of every fill crop.

A sequence of supported processing components whose ordering and layer scope determine the resulting media, rather than an unordered list of interchangeable effects.

Supported selection of an eligible delivered format using actual content/client/configuration conditions, not a guarantee that every accepting browser receives the same format.

A supplied media resource with a relevant size/density descriptor that the browser can select using the actual layout and supported selection model.

Operation-specific integrity/authentication information whose authorization and lifetime semantics must be verified rather than inferred from another signing workflow.

A supported asset delivery arrangement with particular original/derived access rules, not a universal guarantee that every variant or cached copy is hidden.

The relevant period a stored response can be reused as fresh under applicable cache rules, distinct from a promise that it will remain stored.

A representation identifier used in applicable conditional requests to test reuse, distinct from the media’s public identifier or authorization credential.

A response-changing request dimension that a caching design must distinguish appropriately to avoid mixing different authorized representations.

The principle that users and systems should be granted only the minimum access rights necessary to perform their tasks, reducing the potential damage from accidents or malicious activity.

A control that divides critical tasks among different individuals so that no single person can complete a sensitive action alone, helping to prevent fraud and errors.

An access control model where permissions are assigned to roles rather than individual users, and users are assigned to roles based on their job responsibilities.

An authentication method that requires two or more independent credentials from different categories (something you know, have, or are) to verify a user's identity.

The process of verifying the identity of a user, device, or system, typically through credentials such as passwords, tokens, or biometrics.

The process of determining what actions or resources an authenticated entity is permitted to access, often enforced through access control policies.

A mechanism that allows a user to log in once and access multiple applications or systems without re-entering credentials, improving usability and centralizing access control.

The process of converting plaintext into ciphertext using an algorithm and a key, so that only authorized parties can read the original information.

An encryption method that uses the same secret key for both encryption and decryption, offering speed but requiring secure key distribution.

Encryption using a suitable public-key scheme and a corresponding private key for decryption. Authenticated key distribution and the specified padding/protocol remain essential; signatures and key agreement are distinct constructions.

A digest construction mapping input to an output under its defined algorithm, with cryptographic versions designed for appropriate resistance properties. Password storage needs a suitable salted password-hashing/KDF scheme rather than a bare fast digest.

An electronic signature that uses asymmetric cryptography to verify the authenticity and integrity of a message or document.

The policies and mechanisms that determine who can access which systems, data, or facilities and under what conditions.

A system that collects, aggregates, and analyzes log data from various sources to detect security incidents and support compliance reporting.

A structured approach to handling security incidents, typically including preparation, detection, containment, eradication, recovery, and lessons learned.

A document that outlines how an organization will continue critical operations during and after a disruption, including strategies for recovery and restoration.