The IELTS Co-Owner Lost 94% of Its Value. The Reason: Visas.

Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Udacity

Security, DevOps, and Production Deployment

via Udacity

Go to class Write review

Overview

Udacity Diwali Sale: 10% Off All Programs
Use code DIWALI2026 at checkout for 10% off a monthly plan, bundle, or single Nanodegree. For payments in INR. Ends Nov 11.
Get 10% Off
This course explores the intersection of security and DevOps through comprehensive lessons on securing applications in production. Students will delve into Spring Security Architecture, implement custom authentication configurations, and secure RESTful services using OAuth2 and JWT. The curriculum covers vital security concepts like CSRF and OWASP's Top 10 vulnerabilities, along with practical applications in Spring Boot. Furthermore, learners will explore containerization with Docker, Kubernetes for orchestration, and establish CI/CD workflows using Jenkins. Essential topics like secret management, centralized logging with ELK, and performance optimization are also addressed, ensuring a robust foundation in secure production deployment.

Syllabus

  • Introduction to Security and DevOps
  • Understand Spring Security Architecture — Explore the Spring Security 7 filter chain, the lambda-only configuration DSL, and the moving parts of the authentication and authorization model.
  • Apply Custom Authentication Configuration — Configure a custom UserDetailsService backed by a database and define a Spring Security 7 SecurityFilterChain using the lambda-only DSL.
  • Understand Authentication Mechanisms — Explore the authentication options Spring Security 7 supports and when each is appropriate, including passkeys as a modern passwordless option.
  • Apply Form-Based Authentication with Remember-Me — Implement form-based authentication with custom success/failure handlers and remember-me support using the Spring Security 7 lambda DSL.
  • Understand Authorization and Role-Based Access Control — Explore the authorization models Spring Security 7 supports and the distinction between roles and authorities.
  • Apply Role-Based Authorization — Implement layered authorization combining URL-based and method-based rules for a multi-role application using Spring Security 7.
  • Understand OAuth2, JWT — Explore the OAuth2.1 framework, OpenID Connect, and JSON Web Tokens as the foundation of modern API security — including updates in Spring Security 7 such as PKCE-by-default.
  • Apply OAuth2 Resource Server with JWT — Configure a Spring Boot 4 REST API as an OAuth2 resource server validating JWTs with scope-based access control using Spring Security 7.
  • Understand CSRF, CORS — Explore the browser-level threats that target web applications and the mechanisms that mitigate them — including Spring Security 7's hardened defaults.
  • Apply CORS and Security Header Configuration — Configure CORS for a single-page app frontend and harden an API with a strong set of modern security headers using the Spring Security 7 lambda DSL.
  • Understand OWASP Top 10 and Secure Coding — Explore the OWASP Top 10 and the secure-coding practices that prevent the most common web vulnerabilities.
  • Apply OWASP Mitigations in a Spring Boot Application — Audit a vulnerable Spring Boot 4 application and fix issues across several OWASP Top 10 categories.
  • Understand Secret Management — Explore approaches to externalizing secrets and the trade-offs between local, cloud-provider, and dedicated secret stores.
  • Apply Secret Management with Vault — Externalize application secrets into Vault and configure Spring Boot 4 to load them at startup.
  • Understand Configuration Management and Distributed Systems — Explore centralized configuration strategies and basic observability patterns for distributed systems.
  • Apply Centralized Configuration with Spring Cloud Config — Stand up a Spring Cloud Config server backed by a Git repository and wire multiple services to consume it.
  • Understand Logging Frameworks and Structured Logging — Explore modern logging frameworks and how Spring Boot 4's built-in structured logging changes the approach for distributed systems.
  • Apply Structured Logging with Correlation IDs — Configure Spring Boot 4's built-in structured logging with MDC-propagated correlation IDs and W3C Trace Context across services.
  • Understand Centralized Logging with ELK and Splunk — Explore how logs from distributed systems are aggregated, indexed, and searched.
  • Apply Centralized Logging with ELK — Ship application logs to an Elasticsearch cluster and build Kibana dashboards and alerts.
  • Understand Application Metrics and Monitoring — Explore metrics, observability, and SLO-driven monitoring for Spring Boot 4 applications, with OpenTelemetry as the unifying standard.
  • Apply Application Monitoring with Prometheus and Grafana — Expose application metrics and traces via OpenTelemetry and build Grafana dashboards with SLO-based alerts for a Spring Boot 4 service.
  • Understand Docker Fundamentals — Explore container concepts and how they change the packaging and deployment of Java applications.
  • Apply Docker to Package a Spring Boot Application — Write an optimized multi-stage Dockerfile and compose a Spring Boot 4 app with its dependencies.
  • Understand Kubernetes Fundamentals — Explore Kubernetes at a working level as one common deployment target for containerized Spring Boot 4 services (alongside VMs and managed PaaS).
  • Apply Kubernetes Deployment for a Spring Boot Service — Deploy a Spring Boot 4 service to a local Kubernetes cluster with ConfigMaps, Secrets, and health probes as one of several viable deployment paths.
  • Understand CI/CD Pipelines — Explore the principles of continuous integration and deployment and the pipeline-as-code model, with Jenkins as the primary focus and other tools as alternatives.
  • Apply CI/CD with Jenkins — Build a complete Jenkins declarative pipeline for a Spring Boot 4 app covering build, test, security scan, image publish, and deploy.
  • Understand Deployment Strategies and Production Readiness — Explore the deployment strategies that enable zero-downtime releases and the operational concerns that come with them, orchestrated through Jenkins.
  • Apply Blue-Green Deployment with Jenkins and Flyway — Implement a Jenkins-orchestrated blue-green deployment with Flyway migrations that remain backward-compatible.
  • Understand Infrastructure as Code and Performance Tuning — Explore Infrastructure as Code at a working level and go deep on the JVM and application performance-tuning techniques that matter for Spring Boot 4 in production.
  • Apply Performance Profiling and Optimization — Profile a Spring Boot 4 application on JDK 25 to identify and fix a performance bottleneck, with a brief Terraform touchpoint for environment provisioning.
  • Course outro
  • Udapay

Taught by

Laura Morinigo

Reviews

Start your review of Security, DevOps, and Production Deployment

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.