How deeply does Secure APIs cover infrastructure?

Explains topology, controls, attack surfaces, and Infrastructure as Code, while deferring detailed infrastructure techniques to later treatment.

Infrastructure

As explained in Secure APIs

Computing infrastructure is the collection of networks, servers, traffic-management components, and security controls that supports software operation.

Computing infrastructure is the network topology, servers, traffic-management components, and security controls that support API operation. Its configuration strongly affects the API’s security posture. section 1.2.3

Secure infrastructure reduces exposure and limits the impact of attacks by:

Segmenting networks, restricting traffic between services, and isolating high-risk components. section 1.1 section 1.2.3
Using firewalls, load balancers, API gateways, and WAFs to control and protect incoming traffic. section 1.2.3 section 9.0
Replicating environments with Infrastructure as Code and auditing configuration with static analysis tools. section 1.2.3

SSRF through an avatar endpoint

A user service accepts a URL through POST /user/avatar and downloads the avatar. Without input sanitization and service access controls, an attacker can use SSRF to request the admin service, escalate privileges, and access sensitive user data. section 1.1

How Secure APIs covers it

liveBook manning.com

Read Secure APIs on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Simple Object-Oriented Design: Create clean, maintainable applicationsInfrastructure is the set of external systems, integrations, and technical resources outside the backend's direct control.
liveBook manning.com

Infrastructure as Code, Patterns and Practices: With examples in Python and TerraformThe computing resources and supporting systems that provide the foundation for running applications and services.
liveBook manning.com

Shipping Go: Develop, deliver, discuss, design, and go againThe computing resources, platforms, networks, and supporting software systems required to develop, run, and deliver applications.
liveBook manning.com

Architecture Modernization: Socio-technical alignment of software, strategy, and structureInfrastructure is the computing, networking, storage, and operational foundation on which software runs.
liveBook manning.com

Terraform in Depth: Infrastructure as Code with Terraform and OpenTofuInfrastructure is the collection of computing, networking, storage, and related resources that support systems and services.
liveBook manning.com

LLMs in ProductionInfrastructure is the hardware, software, networking, and operational resources that support computing systems.
liveBook manning.com

Think Like a CTOInfrastructure is the collection of computing, networking, storage, and operational components that support software execution.

Compare how 8 books explain infrastructure →

Related concepts

Terraformused by · Terraform is an open-source infrastructure-as-code tool for defining, provisioning, and managing infrastructure resources through declarative configuration.
business logiccontrasts with · Business logic is the domain-specific rules, computations, and decisions that determine how a software system behaves and processes operations.
infrastructure as codeused by · Infrastructure as code is the practice of defining, provisioning, and managing computing infrastructure through machine-readable code or configuration rather than manual procedures.
load balancinghas part · Load balancing is the distribution of requests or computational work across multiple resources to manage demand, reduce workload imbalance, and improve utilization or availability.
infrastructure resourcecontrasts with · An infrastructure resource is an identifiable supporting component or service that provides technical capabilities on which applications or other system components depend.
MySQLhas part · MySQL is an open-source relational database management system that stores, manages, and queries structured data using SQL.

This explainer was generated by Manning's knowledge graph from the text of Secure APIs. The section links point to the parts of the book it draws on.