Security & Trust in a Microservices World

on YouTube ↗49m

" summary

Microservices let teams enforce data flow by classification instead of ad hoc endpoints: services get classification labels in service registry and responses are filtered at runtime, so changing a label (no code or redeploy) returns more or less user data — demonstrated with Kubernetes labels. Identity uses JWT-based transitive trust plus per-instance tokens, aggressive logging and alerts provide audit trails and forensics, and policy-driven revocation and caching keep performance acceptable.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 5:37Interesting questions
3. 9:43More questions?
4. 16:20Types of Data
5. 26:13What does this provide

" related talks

• 01h 06mMicroservice Authentication and AuthorizationNic Jackson · DevOpsCon Berlin 2018
• 46mSecure your Microservices with ZeroTrust approachJonathan Vila · Conf42 Kube Native 2023
• 23mMicroservice Security at the API LevelNathanael Coffing · apidays New York 2020
• 23mAuthentication and Authorization in Micro ServicesSheikh Rubabuddin Osmani · KCD Dhaka 2024
• 45mSecurity in a Microservices Architecture?Florian Garcia, Vivien Maleze · BDX I/O 2018
• 19mOAuth and OpenID Connect for MicroservicesJacob Ideskog · Platform Summit 2014
• 53mSecurity And MicroservicesSam Newman · NDC Sydney 2017
• 57mSecuring Microservices with Auth0 and MicroProfile in Kubernetes without a hassleOndro Mihályi · DevOpsCon Munich 2019