Microservices Security Architecture (+ Cybersecurity basics)

Microservice Security, how to build secure microservices and some important cybersecurity basics topics to make securing microservices understandable.

In this video I talk about some of the basics of building secure Microservices. I compare it to how to build secure monoliths, what are the differences and touch over many topics on Microservices Security like JWT and PASETO tokens, oAuth, Api Gateway, Audit Logging, Rate Limiting, Authentication and Encryption.

Additionally, I introduce some additional cybersecurity topics to secure software applications in general, like threat modelling (using the STRIDE model) and vulnerabilities identification (via OWASP).

#Microservices #Cybersecurity #Security #architecture

-----------------------
Resources:

🔖 FREE:

📚 Paid (personal recommendations - not sponsored, but I can get some commission if you buy them through the links below, at no additional cost to you):

-----------------------

-----------------------
Remember you can reach me here:

-----------------------
In A Dev' Story I explain Software Development related topics from my point of view. I'll be explaining different topics in "Chapters" according to the stage of the story I think they belong. Hope is as entertaining for you as it's fun for me to create these videos

Thanks again for watching! Feel free to like, comment, share and subscribe, it means a lot to me and helps the channel grow.

[DanikaOliver]

Thank you for the best and easiest explanation ever.

[androsxs]

Love your videos! This is something really valuable for learning system design which is not easy!. Thanks!

[krzysztof]

I am java backend dev from 15 years and i love it :) clean and fast, however i cannot understand some of the words especially when you are talking fast, hoping for more movies in the future

[rsmahi]

OAUTH is authorization protocol, it probably uses SAML/OpenID in combination with OAUTH

[rabiealmejbas]

I love your vedios!! If you can make a new series on security implications on the different architectures, that will be fanatastic

[zoshieee]

Thank you very much, Can you please give som examples about time critical applications like motor control?

[lifechamp]

Super helpful - Thank you so much !! #StayBlessednHappy

[fdhsdrdark]

That's another great video! Congrats! And the diagrams - just awesome!
Just a couple of questions:
1) What if there is no need for different microservices types, just one - just the "Pool" microservice in the presentation.
Would the API gateway, as a distinct microservice, still in need in that case?
Maybe it 's logic should be embedded in the single microservice type?
Would that allow for multiple instances of that microservice type?(That is multiple instances of a "Pool" microservice that will have the authentication/authorization logic embedded)

2) I suppose that having huge amount of requests would lead to the API gateway to be a bottleneck - or not?
If so, the API gateway should be scaled? Any advice on how going on that?

Again, thanks for the amazing content!

[nunuommol]

Thanks, that help for AI machine maintenance research i do.

[barryAllen]

Find your video quite helpful, do you have any good course or youtube video suggestions in mind that goes into this in detail using JAVA framework

[MarkAkram]

I like your video but by no means this is security basics