Security best practices
In this section, we are going to review a list of best practices that are going to help you establish service management, automate how common service vulnerabilities are scanned, and perform threat modeling to identify the weaknesses in your microservice applications.
Secure secret management
One of the most common problems in software security is storing secrets – parts of application configuration containing private information, such as passwords or encryption keys. In microservice environments, the number of secrets can often be much bigger than in monolithic applications: each service might have its own encryption keys and security certificates. Therefore, the problem of storing secret data securely is even more critical for microservice applications.
Unlike most parts of service configuration, such as Docker and Kubernetes configuration files, secrets can’t be stored in regular code repositories, such as Git. The reasons for this...
