Securing Event Streams
Before you secure any individual components, you should spend some time designing and establishing your security posture. Determine which individual pieces of your application need their own isolated security and which areas of your application are covered under a broader umbrella provided by other components. This section and the rest of this chapter will give you some useful rules and guides to help you establish this stance.
The event stream is the sole source of truth. If someone can tamper with, or add to, that source of truth, then any number of terrible things can happen. If an intruder can add an event to the stream, they can alter someone’s account balance, steal funds and secrets, or wreak miscellaneous havoc. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access