CSSLP: Certified Secure Software Lifecycle Professional

Declarative security is container-managed security in which security requirements are expressed externally through deployment or configuration descriptors rather than enforced by application code. The deployer applies those declared policies at deployment, and the container enforces them when the application runs.