Special offers now — see discounted courses.
day
:
hour
:
min
:
sec
See special offers
Microservices and API Security for Security Architects: From Gateway Protection to Container Security

Microservices and API Security for Security Architects: From Gateway Protection to Container Security

1h 43mBeginner2025-10-24

Authors

Karl Ots

Karl Ots

Cloud and Cybersecurity Expert, Azure MVP, Microsoft Regional Director

Course details

In this course, delve into the critical aspects of securing distributed applications. Instructor Karl Ots shows you how to safeguard APIs through robust gateway protection and secure microservices within containerized environments with service mesh architecture. Along the way, gain the skills necessary to design and deploy secure, scalable architectures that meet your organization’s security requirements. This course is designed to provide a comprehensive understanding of security measures without focusing on specific vendor configurations.

This course is integrated with GitHub Codespaces, an instant cloud development environment that offers all the functionality of your favorite IDE without the need for any local machine setup. With GitHub Codespaces, you can get hands-on practice from any machine, at any time—all while using a tool that you’ll likely encounter in the workplace.

Learning objectives
Design secure distributed applications by implementing microservices architectures with appropriate security controls, authentication mechanisms, and access management protocols to protect cloud-native environments.
Evaluate API management gateway solutions and security monitoring strategies to determine the most effective approaches for protecting distributed systems against security threats and vulnerabilities.
Implement service mesh architectures using technologies like Istio and DAPR to establish secure communication protocols, circuit breaker patterns, and service discovery mechanisms within containerized environments.
Analyze security requirements and organizational needs to create scalable, high-availability distributed systems that incorporate appropriate authentication, authorization, and monitoring controls.
Synthesize comprehensive security strategies that integrate API gateways, service mesh technologies, and microservices patterns to create robust, vendor-agnostic security frameworks for distributed applications.

Concepts

Introduction

  • Securing distributed applications

Microservices Architecture Security

  • Overview of microservices-based application architecture
  • Microservices architecture patterns
  • Authentication and access management for microservices
  • Secure communication protocols for microservices
  • Security monitoring for microservices
  • High availability and resiliency for microservices

Service Mesh Security

  • Overview of service mesh infrastructure
  • Service mesh security controls
  • Authentication and authorization for service mesh
  • Service discovery
  • Secure service access policy
  • Mutual authentication with TLS
  • Configure service mesh for network resilience

API Gateway Security

  • Overview of API management gateways
  • Integrate the API gateway with identity management
  • Centralize policy enforcement with the API gateway
  • Rate limiting
  • Circuit breaker

Container Security

  • Overview of container security
  • Container supply chain security
  • Container runtime security
  • Demo - Deploy Istio-based service mesh for Kubernetes
  • Egress control

Demos and Labs

  • Demo - Deploy Distributed Application Runtime (Dapr)
  • Demo - Use of Dapr Secrets API to access secret stores
  • Demo - Enforce Kubernetes cluster governance with Kyverno
  • Demo - Harden a Kubernetes cluster

Conclusion

  • Next steps

About us

LyndaKade is a leading learning platform that helps people learn business, software, technology, and creative skills to achieve personal and professional goals.

Phone numberAparat ChannelTelegram SupportTelegram ChannelInstagram Page

All rights to this site belong to LyndaKade.

Terms of Service|Privacy Policy

نماد الکترونیک enamad در صورت اتصال با آی‌پی داخل کشور، نمایش داده خواهد شد.
logo-samandehi - لوگو ساماندهی
Zarinpal
Zibal