Architectural Patterns Focus: Security
summary
Shows a concrete set of patterns and working demos: an Envoy mTLS demo works via docker compose that proves sidecars handle certificate rotation and TLS between services, a Vault dynamic DB creds with TTL flow that issues short‑lived PostgreSQL users, and a valet‑key approach issuing time‑limited S3 access. Covers reproducible builds, Java JLink/JDeps to shrink images, SBOMs (CycloneDX/SPDX), and real incidents (Log4j, XZ utils) that pushed supply‑chain and dependency scanning.
AI-written summary · about
chapters (7)
- 0:00Introduction to security patterns
- 10:00Common attack vectors explained
- 20:00Threat modeling fundamentals
- 30:00Gateway and API security patterns
- 39:00Mutual TLS and service mesh
- 45:00Secure container practices
- 50:00Supply chain security importance
related talks
41mSecurity Patterns for Microservice Architectures
01h 03mArchitectural patterns for the cloud
50mArchitectural Patterns for Spring Security You Wish Your Tech Lead Knew
43mSecuring the Service to Service Call Chain Patterns and Protocols
19mFrom Code to Cloud: Embedding Security
47mA Collection of Microservice Patterns
57mHow Do I Secure My Micro-Services?
47mLet's move to X - Comparing the security of architecture patterns