Microservices security architecture in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main goal of microservices security architecture?

To protect each small, independent service in a microservices system from threats, ensuring the whole application stays safe.

beginner

Why is securing communication between microservices important?

Because microservices often talk to each other over networks, securing their communication prevents attackers from intercepting or tampering with data.

beginner

What role does authentication play in microservices security?

Authentication verifies the identity of users or services before allowing access, ensuring only trusted entities can use the microservices.

intermediate

How does the principle of least privilege apply in microservices security?

Each microservice or user is given only the minimum access rights needed to perform their tasks, reducing the risk if one part is compromised.

intermediate

What is the purpose of an API gateway in microservices security?

An API gateway acts as a single entry point that manages requests, enforces security policies, and can help protect microservices from attacks.

Which method is commonly used to secure communication between microservices?

A Using HTTPS/TLS encryption

B Sending data in plain text

C Disabling firewalls

D Using unprotected ports

HTTPS/TLS encrypts data between microservices, protecting it from interception or tampering.

What does 'authentication' ensure in microservices security?

A That data is encrypted

B That the identity of users or services is verified

C That services run faster

D That all users have full access

Authentication confirms who is trying to access the service before allowing entry.

What is the principle of least privilege?

A Giving all users full access

B Allowing anonymous access

C Giving users only the access they need

D Sharing passwords among services

It limits access rights to only what is necessary, reducing security risks.

What is the role of an API gateway in microservices?

A To manage and secure incoming requests

B To replace all microservices

C To store data permanently

D To slow down communication

An API gateway controls and secures how requests reach microservices.

Why is monitoring important in microservices security?

A To reduce service availability

B To increase network traffic

C To disable security features

D To detect unusual activity or attacks quickly

Monitoring helps spot problems early so they can be fixed before damage occurs.

Explain how authentication and authorization work together to secure microservices.

Think about who you are and what you can do.

Describe why securing communication between microservices is critical and how it is commonly done.

Consider how you protect messages sent over the internet.