Security Patterns for Microservice Architectures

"Are you securing your microservice architectures by hiding them behind a firewall? That works, but there are better ways to do it. This presentation recommends 11 patterns to secure microservice architectures.
1. Be Secure by Design
2. Scan Dependencies
3. Use HTTPS Everywhere
4. Use Access and Identity Tokens
5. Encrypt and Protect Secrets
6. Verify Security with Delivery Pipelines
7. Slow Down Attackers
8. Use Docker Rootless Mode
9. Use Time-Based Security
10. Scan Docker and Kubernetes Configuration for Vulnerabilities
11. Know Your Cloud and Cluster Security"
Matt Raible, Open Source Developer at Okta
Slides: www.slideshare.net/Pivotal/se...

[@vihangakanchana1211]

Hi,
Usually SecurityConfiguration we are doing like
.antMatchers("/api/public/test1").hasAuthority("ACCESS_TEST1")
.antMatchers("/api/public/test2").hasAuthority("ACCESS_TEST2")
But I want to get this endpoints and required authority to property file or DB.
can I do it? and how can I do it?

[@pradhyumnakandamuru]

hey I can't see the Slack channel link

[@wrongturn_w]

shame they didn‘t actually use that shot for the thumbnail 😂

[@gokhan1342]

Where can i find presentation ?

[@JonasSolar]

See 39:08