Suspicious Minds – Zero Trust Security for APIs
summary
Euler Hermes moves APIs behind a four‑step check on every call: WAF, identity, authorization and a business logic validation, with microservices hosted in an AWS VPC and a developer portal exposing them. Identity uses federated HR Active Directory, Salesforce contacts and KYC flows tied into wsl2 id server, tokens limited to about one hour. Authorization complexity is delegated to a centralized resource manager service that returns yes/no, trading some latency (around 100 milliseconds) for fine‑grained, auditable control.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:54What is Credit Insurance
- 4:30Zero Trust API Security
- 8:52Deep Dive
- 15:24Authorizations
- 16:24Contracts
- 17:38Workflow
- 19:09Security
- 21:32Challenges
- 23:11Benefits
related talks
26mZero Trust Security for your APIs
38mZero Trust Security for your APIs
41mJourneys to Zero Trust on AWS
24mSecuring APIs in a Zero Trust Network Environment
20mZero-Trust Security Strategy in Serverless App Deployment
32mSecuring Value in API Ecosystems
18mImplementing Zero Trust at Enterprise Scale
59mAchieving Zero Trust with AWS application networking