October 2024
Intermediate to advanced
396 pages
11h 44m
Spanish
Content preview from Seguridad y arquitectura de microservicios en AWS
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Capítulo 7. Seguridad en tránsito
Este trabajo se ha traducido utilizando IA. Agradecemos tus opiniones y comentarios: translation-feedback@oreilly.com
Si dos módulos de un monolito deben comunicarse entre sí, generalmente se trata de una simple llamada a un método en memoria. Los microservicios, a diferencia de los monolitos, dependen de un transporte externo (como una red) para comunicarse entre sí (ya que los módulos se descomponen en servicios independientes que posiblemente se ejecuten en máquinas diferentes).
Los canales de comunicación externos tienen más probabilidades de ser vulnerables a posibles amenazas de actores maliciosos, en comparación con las llamadas en memoria. Así pues, por definición, los canales de comunicación externos corren un mayor riesgo agregado.
Para ilustrar este punto, utilizaré un ejemplo del proceso de pago de una aplicación de comercio electrónico, como se muestra en la Figura 7-1. Imagina que el proceso de pago implica que la aplicación calcula el precio del artículo y lo cobra al cliente buscándolo en un repositorio. Al pasar por caja, la empresa disminuye el inventario disponible de este artículo.
Dado que un canal de comunicación externo aumenta intrínsecamente el riesgo agregado de la aplicación, los profesionales de la seguridad deben añadir controles para garantizar que se minimizan las amenazas potenciales. El cifrado en tránsito es el control más utilizado para reducir la amenaza potencial de que los mensajes sean interceptados, manipulados ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.