Microservices Security in Action

Design Secure Network and API Endpoint Security for Microservices Applications, with Examples Using Java, Kubernetes, and Istio

By: Prabath Siriwardena, Nuwan Dias

Narrated by: Aiden Humphreys

About the technology

Integrating independent services into a single system presents special security challenges in a microservices deployment. With proper planning, however, you can build in security from the start. Learn to create secure services and protect application data throughout development and deployment. As microservices continue to change enterprise application systems, developers and architects must learn to integrate security into their design and implementation. Because microservices are created as a system of independent components, each a possible point of failure, they can multiply the security risk.

About the book

Microservices Security in Action is filled with solutions, teaching best practices for throttling and monitoring, access control, and microservice-to-microservice communications. Along the way, authors and software security experts Prabath Siriwardena and Nuwan Dias shine a light on important concepts like throttling, analytics gathering, access control at the API gateway, and microservice-to-microservice communication. You'll also discover how to securely deploy microservices using state-of-the-art technologies including Kubernetes, Docker, and the Istio service mesh. When you're finished listening, you'll be planning, designing, and implementing microservices applications with the priceless confidence that comes with knowing they're secure!

What's inside

• Microservice security concepts
• Edge services with an API gateway
• Deployments with Docker, Kubernetes, and Istio
• Security testing at the code level
• Communications with HTTP, gRPC, and Kafka

About the audience

For experienced microservices developers with intermediate Java skills.

About the authors

Prabath Siriwardena is the vice president of security architecture at WSO2. Nuwan Dias is the director of API architecture at WSO2. They have designed secure systems for many Fortune 500 companies.

PLEASE NOTE: When you purchase this title, the accompanying PDF will be available in your Audible Library along with the audio.

©2020 Manning Publications (P)2021 Manning Publications

Not suitable for an audio book

This is one of those technical books that go into code-level detail using specific techs rather than focusing on general principles. First of all it makes it very difficult to listen to. The narrator does his best and has a clear voice but it would have made sense not to pronounce each command as-is but just skip all the special characters. Secondly, focusing on specific tech makes it more difficult to apply in other techs and tends to become out-dated. E.g. rather than explaining how to generate certificates command-by-command using openssl, they could've just explained how certificate chains etc. work.

I doubt I can listen this to the end. I won't be buying the ebook either because I don't want a step-by-step book.