Module 09
Security
The security questions that come up in design rounds: who the caller is, what they may do, how services trust each other, and how data and tenants stay isolated.
By the end of this module you can
- Choose sessions or tokens for a client
- Explain OAuth 2.0 and OpenID Connect in one breath
- Secure service-to-service calls
- Isolate tenants and protect data at rest
Identity and access
Proving who the caller is and what they may do.
- Authentication: sessions, tokens and JWTPremiumSoon
- OAuth 2.0 and OpenID ConnectPremiumSoon
- Service-to-service auth and mTLSPremiumSoon
Protecting data
Keeping data and customers apart and unreadable to outsiders.
- Encryption and key managementPremiumSoon
- Multi-tenancy and isolationPremiumSoon