Building Secure Microservices in Azure
summary
Describes a concrete .NET 6 demo that secures microservices with Azure AD using client credentials for machine-to-machine calls, managed identities for in‑Azure apps, and configured app roles for per-API authorization. Uses App Services, Pulumi to provision resources, Swagger for local auth flow, and shows tokens that include role claims. External users use Auth0; on-prem systems revert to secrets/certificates. Demo runs end-to-end and returns 200s with correct role-bearing tokens.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:05Monolith to microservices in Azure
- 5:28Microservice communication security
- 7:15Zero trust model
- 10:04Azure AD security backbone
- 21:20Role-based API permissions
- 24:51Live demo setup
- 33:03Securing API with Azure AD
- 40:10Local dev authentication
- 52:15External client authorization
- 58:14Managed identities
- 1:03:32Key takeaways and conclusion
related talks
01h 03mBuilding Secure Microservices in Azure
50mSecuring .NET Apps and Microservices in Azure
52mDemystifying Web API Security in Azure
01h 02mDemystifying Web API Security in Azure
01h 03mServerless and App Service Security on Azure
53mWeb API Security With Azure Active Directory
50mSecuring a REST API with Azure Active Directory
50mSecuring Serverless Applications in Azure