Declarative security is a syntax that uses attributes to place security information into the metadata of the code.