Designing Secure Applications in the Cloud
Talkat Cloud Native Security Day North America 2020 · on Tuesday, 2020-11-17· at 12:50· Virtual , VIrtual·
summary
Three concrete patterns for cloud app security: the gatekeeper pattern validates and sanitizes a single public endpoint before calling internal services; the valet key (SAS) token issues time‑limited tokens (example code creates a 10‑minute write SAS URI for Azure Blob Storage); the federated identity pattern delegates auth to an external IdP and enables role/claims access control. Also recommends MFA, JIT access to production, Azure Key Vault for secrets, STRIDE threat mapping and instrumentation for monitoring.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:52Disadvantages
- 2:24Human error
- 2:51Malicious attacks
- 5:28Security checklist
- 8:13Gatekeeper pattern
- 10:32Valet key pattern
- 12:23Azure storage token
- 14:26Federated identity
- 16:21How to enforce security
- 19:57Reducing attack surface
- 22:54Threat modelling
related talks
34mDesigning Secure Applications in the Cloud
21mDesigning Secure APIs in the Cloud
01h 02mLock That Sh*t Down! Auth Security Patterns for Apps, APIs, and Infra
47m8 Cloud Design Patterns you ought to know.
50mSecuring .NET Apps and Microservices in Azure
47mSecuring Serverless Applications in Azure
41mSecurity Patterns for Microservice Architectures
50mArchitecting a secure cloud framework