Microservices: Security

Introduction

• Securing microservices
• Microservices learning curve

1. Microservice Security Foundations

• Microservice concepts
• Security fundamentals
• Microservice security challenges

2. Identity Management and Access Control

• Distributed access management patterns
• Identity and Access Management platforms
• API gateways
• Access scenarios
• Work with IAM platforms

3. Token-Based Security and Standards

• Tokens
• OAuth 2 primer
• OAuth in Microsoft Entra
• Register client applications
• Issuing tokens
• Work with OAuth 2.0 endpoints
• Issuing identity tokens with OIDC
• Token validation
• Token maintenance and protection

4. Security between Microservices

• MTLS
• Securing east to west traffic
• Monitoring and logging
• Service mesh

5. Application and Container Security

• Throttling and rate limiting
• Container runtime security
• Image security
• Audit container security
• Secrets management
• Secure pipelines
• Prevent leaked credentials
• Keep secrets with Key Vault

Conclusion

• Securing microservices