The Easy Way To Secure Microservices

This talk addresses the critical need for securing microservices in production environments, particularly when operating in a public cloud. The speaker explores the added complexities of ensuring encrypted communication and robust authorization checks across numerous services compared to monolithic systems. They demonstrate how to effectively implement security measures using a service mesh tool like Istio, highlighting the simplicity of applying mutual TLS (mTLS) to secure service communication with minimal Istio rules. Additionally, the session covers how to leverage Istio for basic service-to-service communication and end-user authorization checks, utilizing JWT, and provides insights into extended authorization within a Java service through the MicroProfile specifications.