Securing .NET Apps and Microservices in Azure

on YouTube ↗50m

" summary

Demonstrates securing ASP.NET apps and microservices on Azure by using ASP.NET Identity for user accounts, JWT claims and role/attribute policies for authorization, and recommending client certificates plus token-based mutual authentication between services. Shows using an API gateway (Azure API Management or Ocelot) to enforce policies, quotas and per-subscription rate limits (example quota 16 requests), and storing secrets in Azure Key Vault with access tied to managed identities, including configuration demos and end-to-end flows.

AI-written summary · about

" chapters (9)

1. 0:00Welcome
2. 1:26Microservices security challenges
3. 5:20Security design principles
4. 16:53ASP.NET Core Identity
5. 27:18Role-based access control
6. 33:00External identity providers
7. 39:04Secrets management
8. 44:02Security tools
9. 45:52Q&A

" related talks

• 01h 05mBuilding Secure Microservices in AzureJimmy Bogard · NDC London 2023
• 01h 03mBuilding Secure Microservices in AzureJimmy Bogard · NDC Oslo 2022
• 01h 02mDemystifying Web API Security in AzureJimmy Bogard · NDC Sydney 2024
• 52mDemystifying Web API Security in AzureJimmy Bogard · DevConf 2023
• 50mSecuring Serverless Applications in AzureSjoukje Zaal · NDC Sydney 2020
• 53mWeb API Security With Azure Active DirectoryRainer Stropek, Simon Opelt · Global Azure Austria 2021
• 41mEasy-Auth: The Easiest Way to Secure Your Application in Azure App ServiceMassimo Bonanni · DevDays Europe 2024
• 52mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC Copenhagen 2019