Summary

In this chapter, you learned about various design principles to apply security best practices for your solution design. These principles include key considerations to protect your application by using appropriate access control, data protection, and monitoring.

You need to apply security at every layer. Starting with user authentication and authorization, you learned about applying security at the web layer, application layer, infrastructure layer, and database layer. Each layer is vulnerable to different attacks, and you learned various methods to protect your application with the available technology choices.

For user management, you learned how to use FIM and SSO to handle corporate users and various methods of implementing user authentication and authorization. These include enterprise management services like Microsoft AD and AWS Directory Service. You can also handle millions of users using OAuth 2.0.

At the web layer, you learned about various attack types...