Security
The previous section has demonstrated how microservices, built on databases, schemas, and API definitions, offer a effective way to scale and support agile development. This section introduces a systematic framework for database security, known as Authentication, Authorization, and Audit (AAA). A systematic approach is critical, as microservices distributed over the network can offer more potential points of attack. There are more connection points, APIs, and moving parts in a microservices architecture compared to a monolith. A systematic and scalable approach is key.While there is a bigger security context (physical access to the server, network access to the server, encryption of data in transport, and encryption at rest) that has to be addressed in a production deployment, this book will focus on the PostgreSQL database itself.AAA provides a step-by-step methodology that leverages PostgreSQL capabilities and takes advantage of the data domain definitions in the microservices...
