Microservices: Security

Introduction

• Securing microservices
• Microservices learning curve

1. Microservice Security Foundations

• Microservice concepts
• Security fundamentals
• Microservice security challenges

2. Identity Management and Access Control

• Distributed access management patterns
• Identity and Access Management platforms
• API gateways
• Access scenarios

3. Token-Based Security and Standards

• Tokens
• OAuth 2 primer
• Issuing tokens
• Issuing identity tokens with OIDC
• Token validation
• Token maintenance and protection

4. Security between Microservices

• MTLS
• Securing east to west traffic
• Monitoring and logging
• Service mesh

5. Application and Container Security

• Throttling and rate limiting
• Container runtime security
• Image security
• Secrets management
• Secure pipelines

Conclusion

• Securing microservices