DevOps Conference 2018 Berlin, 28 - 31 May 2018
The Conference for Continuous Delivery, Microservices,
Docker, Clouds and Lean Business

Microservice Authentication and Authorization

Only till March 22 ✓ 4 Days Special ✓ Tablet for free ✓ Save up to 510 € Register now
Tuesday, May 29 2018
11:45 - 12:45

In this talk we will look at how you can secure your microservices, we will identify the difference between authentication and authorization and why both are required. We will investigate some common patterns for request validation, including HMAC and JWT to avoid the confused deputy problem, and also how you can manage and secure secret information. Finally, we will see how we can leverage tools like the open source HashiCorp Vault as well as features from cloud providers like AWS and GCP, to keep your systems and users secure. Takeaways: 

  • Using JWT for Authz
  • How to implement two factor authentication into your applications
  • Securing microservice secrets 
  • Implementing TLS and MTLS
  • Securing database access, don’t be the next Equifax
  • Encryption in transit, secure your data
  • Building a secure secret access policy

Stay tuned:

Behind the Tracks