A How to Guide to Security in the PAAS Cloud
summary
Builds a complete Java web app secured top-to-bottom: TLS at JSSE, container auth moved into Apache Fortress for RBAC with LDAP, Spring Security page rules, fine-grain Wicket/UI checks and MySQL row filtering; five security layers and five real patterns are exercised. Forklifts the WAR into Cloud Foundry by customizing the Java buildpack, using service bindings for dynamic DB credentials and Warden isolation. Demonstrates OAuth2 client credentials grant, UAA and SAML via SSO Circle; all demos run end-to-end.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 1:00Being a fullstack developer
- 2:11Security is hard
- 6:07Three easy steps
- 8:20Step 1 Build a secure Java application
- 11:35Theme 1 Simplicity
- 22:02Back Object Model
- 25:14Spring Security
- 31:07Demo
- 39:51ToDo List
- 40:22Understanding Cloud Foundry
- 44:25Credential Provisioning
- 45:14Implications
- 46:13Developer vs Developer
- 46:55Modify Build Pack
- 47:24Rebuild Build Pack
- 47:39Maven Clean Package
- 48:57Container Isolation
- 50:50Application Security Groups
- 51:52Staging and Running
- 52:31Cloud Native
- 53:11What does Cloud Native mean
- 54:10No rest for the weary
- 54:40Microservices
- 55:33Direct Access
- 55:56Change of Plans
- 56:09Man in the Middle
- 56:34Static Deployment
- 56:56Bottom Line
- 57:44TLDR
- 58:00OAuth II
related talks
35mThe Anatomy of a Secure Web Application in Java Using Spring Security and Apache Fortress
35mBuilding Security In: Using Cloud Foundry to Secure CF Apps
01h 26mSecuring Rest-ful Web Services with OAuth2
37mJava Microservices at Scale on Cloud Foundry, Today and Tomorrow
31mBoF: Security Best Practices in Cloud Foundry
31mPractical Guide to Frictionless Cloud Native Security for DevOps
33mSpring Security Patterns
50mSupply Chain Security for Cloud Native Java.