Microservices and API Security for Security Architects: From Gateway Protection to Container Security
1h 43mBeginner2025-10-24
Authors

Karl Ots
Cloud and Cybersecurity Expert, Azure MVP, Microsoft Regional Director
Course details
In this course, delve into the critical aspects of securing distributed applications. Instructor Karl Ots shows you how to safeguard APIs through robust gateway protection and secure microservices within containerized environments with service mesh architecture. Along the way, gain the skills necessary to design and deploy secure, scalable architectures that meet your organization’s security requirements. This course is designed to provide a comprehensive understanding of security measures without focusing on specific vendor configurations.
This course is integrated with GitHub Codespaces, an instant cloud development environment that offers all the functionality of your favorite IDE without the need for any local machine setup. With GitHub Codespaces, you can get hands-on practice from any machine, at any time—all while using a tool that you’ll likely encounter in the workplace.
Learning objectives
Design secure distributed applications by implementing microservices architectures with appropriate security controls, authentication mechanisms, and access management protocols to protect cloud-native environments.
Evaluate API management gateway solutions and security monitoring strategies to determine the most effective approaches for protecting distributed systems against security threats and vulnerabilities.
Implement service mesh architectures using technologies like Istio and DAPR to establish secure communication protocols, circuit breaker patterns, and service discovery mechanisms within containerized environments.
Analyze security requirements and organizational needs to create scalable, high-availability distributed systems that incorporate appropriate authentication, authorization, and monitoring controls.
Synthesize comprehensive security strategies that integrate API gateways, service mesh technologies, and microservices patterns to create robust, vendor-agnostic security frameworks for distributed applications.
This course is integrated with GitHub Codespaces, an instant cloud development environment that offers all the functionality of your favorite IDE without the need for any local machine setup. With GitHub Codespaces, you can get hands-on practice from any machine, at any time—all while using a tool that you’ll likely encounter in the workplace.
Learning objectives
Design secure distributed applications by implementing microservices architectures with appropriate security controls, authentication mechanisms, and access management protocols to protect cloud-native environments.
Evaluate API management gateway solutions and security monitoring strategies to determine the most effective approaches for protecting distributed systems against security threats and vulnerabilities.
Implement service mesh architectures using technologies like Istio and DAPR to establish secure communication protocols, circuit breaker patterns, and service discovery mechanisms within containerized environments.
Analyze security requirements and organizational needs to create scalable, high-availability distributed systems that incorporate appropriate authentication, authorization, and monitoring controls.
Synthesize comprehensive security strategies that integrate API gateways, service mesh technologies, and microservices patterns to create robust, vendor-agnostic security frameworks for distributed applications.
Concepts
Introduction
- Securing distributed applications
Microservices Architecture Security
- Overview of microservices-based application architecture
- Microservices architecture patterns
- Authentication and access management for microservices
- Secure communication protocols for microservices
- Security monitoring for microservices
- High availability and resiliency for microservices
Service Mesh Security
- Overview of service mesh infrastructure
- Service mesh security controls
- Authentication and authorization for service mesh
- Service discovery
- Secure service access policy
- Mutual authentication with TLS
- Configure service mesh for network resilience
API Gateway Security
- Overview of API management gateways
- Integrate the API gateway with identity management
- Centralize policy enforcement with the API gateway
- Rate limiting
- Circuit breaker
Container Security
- Overview of container security
- Container supply chain security
- Container runtime security
- Demo - Deploy Istio-based service mesh for Kubernetes
- Egress control
Demos and Labs
- Demo - Deploy Distributed Application Runtime (Dapr)
- Demo - Use of Dapr Secrets API to access secret stores
- Demo - Enforce Kubernetes cluster governance with Kyverno
- Demo - Harden a Kubernetes cluster
Conclusion
- Next steps