Tag Archives: Dependency

BUSINESS CAPABILITY and API ECONOMY: beware of a man-trap

The fundamental meaning of business capability can be explained as an ability to do/build/construct/gain/provide/deliver certain business value in the given business context. Microservices and API constitute an API Economy. According to the Amazon’s “AWS Service Terms”, October 16, 2017, it denies real support.while all problems with the data files are always claimed on the API-customer organisation.

#Microservice #Protection based on the principle of #Zero #Trust

The task addressed in the article is about protecting Microservice’s functionality and resources in the inter-Microservice interactions. Known techniques like OpenID Connects, JWT and OAuth2 were reviewed from the perspective of Microservice interactions. It has been found that these techniques cannot be applied as-is to the Microservices either because unanswered questions to them or because of doubtful trustfulness of related workflows.
The article proposes two protective methods for Microservice (or service) that have sensitive functionality and/or resources. While the Basic Protection Method is just a classic identity verification and following access permission control, the method does not require single centralised Identity and Permission Authorities. The latter can be distributed as needed following the distribution of Microservice-based applications. The Closed Optimised Protection Method replaces Identity and Permission Authorities with Dependency Catalogue Service per application and provides full protection with performance comparable with OpenID-JWT/OAuth2.