Microservice Authentication and Authorization | Nic Jackson

Nic Jackson (HashiCorp) | In this talk we will look at how you can secure your microservices, we will identify the difference between authentication and authorization and why both are required. We will investigate some common patterns for request validation, including HMAC and JWT to avoid the confused deputy problem, and also how you can manage and secure secret information. Finally, we will see how we can leverage tools like the open source HashiCorp Vault as well as features from cloud providers like AWS and GCP, to keep your systems and users secure. Takeaways: - Using JWT for Authz - How to implement two factor authentication into your applications - Securing microservice secrets - Implementing TLS and MTLS - Securing database access, don’t be the next Equifax - Encryption in transit, secure your data - Building a secure secret access policy Join us at the next DevOpsCon: The Conference for Continuous Delivery, Microservices, Containers, Cloud & Lean Business Follow us on Twitter: Like us on Facebook: