API Security Challenges for Cloud-native Architects

This presentation was help at Apidays Paris 2023 and APISec CON track on December 2023.

The presentation is about the evolution of software architecture to match the modern requirements of digital platforms and the associated software design patterns, with a special focus on APIs and API security.

It provides some tips to avoid the common traps and pitfalls of distributed cloud software and emphasis on the evolving role of software architects.

Transcript

1. Pierre Versali pierre-versali.bitbucket.io API Security Challenges for Cloud-Native Architects
2. Pierre Versali Cloud-Native Software Architect Principal Consultant | Team Coach
3. Agenda Software Architecture Cloud-Native Software API Security Challenges
4. Monolith Application Software Architecture
5. Monolith Application Distributed Monoliths Software Architecture
6. Monolith Distributed Monoliths Service Oriented Architecture Software Architecture
7. Monolith Distributed Monoliths Service Oriented Architecture Microservices Software Architecture
8. From Monolith Application to Digital Platforms
9. Digital Platform – Data Flows
10. Cloud Models
11. Cloud Models
12. Evolution of Delivery Models
13. Strategic Efficient Secure Flexible Cost-effective Benefits of Cloud
14. Containers APIs Microservices Cloud-native Software Cloud Infrastructure Dev Ops
15. HIGHLY-AVAILABLE SCALABLE COST-EFFECTIVE Cloud-native Software
16. API – Application Programming Interface
17. ü Loose Coupling ü Integration ü Collaboration ü Standardization ü Developer Experience ü Testability API Benefits
18. API Protocol Message Format Specification Synchronous SOAP XML SOAP REST over HTTP JSON OpenAPI GraphQL GraphQL GraphQL gRPC over HTTP/2 Protobuf gRPC Asynchronous Event Broker Pub / Sub Kafka / MQTT JSON Protobuf Avro Thrift AsyncAPI WebSockets API – Protocols | Message Formats | Specification Standards and Best Practices
19. ü Separation of Concern ü Diversity in Technology Stack ü Isolation ü Reusability ü Flexibility / Scalability ü Reliability Microservices Benefits
20. • Complexity • Security • Performance • Evolutivity • Deployment • Data Consistency • Resilience • Fault Tolerance • … 🤯 Microservices concerns
21. Service Orchestration
22. Reactive Programming / Message-Driven
23. Event Sourcing & CQRS
24. Domain-Driven Design
25. API Conversation Pattern Synch Graph Async Messaging (Pub/Sub) Processes Data Consistency Eventual Consistency Choreography / Orchestration Event-Sourcing CQRS Fault-Tolerance Process Management State Management Retry / Rollback Data storage Relational Data Key-Value Event-Driven Microservices problems
26. Identity and Access Management
27. Containers
28. Node 2 Node 3 Node 1 … Container Orchestration Configuration Availability Provisionning Scaling Automation Resource Allocation Load Balancing Health Monitoring
29. DevSecOps
30. Quality Gate & Test Automation
31. Infrastructure as Code
32. • Key Vault • GitOps • Platform Engineering • SRE • FinOps Infrastructure as Code – Going further
33. Containers Orchestration API-First Development Reactive Microservices Cloud-native Software on Steroïds IaC / GitOps / FinOps Platform / SRE Dev Ops Security Domain Driven Design Observability MFA IAM
34. Accelerate delivery Speed-up time-to-market Enable modularity Enable Agility Continuous Delivery Cloud-native Software Benefits
35. There is not a single or clear way for designing Software Architecture Software Architecture is at the edge between Business Goals, Functional Requirements, Hardware Capabilities and… your Budget! Takeaway
36. • Architecture decisions are tough • Architecture decisions always come with trade-offs • Architecture decisions always require effort (and sometimes pain) • Architecture decisions require compromise • Architecture decisions should always be balanced • Changes require to adapt Takeaway
37. What problem are you trying to solve? A Software Architect Takeaway
38. Here are the options: … A Software Architect Takeaway
39. Pierre Versali pierre-versali.bitbucket.io Any question? 🙋 Thank you! 🙏