Data protection is the set of practices for preventing data from being damaged, lost, overwritten, or deleted.
Security protects data and application operations from damage, loss, unauthorized modification, disruption, and exposure. Treat customer-captured source data as the highest protection priority because it cannot be regenerated. section 11.4.3section 12.5
Build practical protection around these defensive measures:
Automate backups, then regularly practice restoring them; maintain important data in at least three places. section 11.4.3
Record data safely as soon as it is captured, and never overwrite or delete source data. section 11.4.3
Keep capture code minimal and thoroughly tested because failures in this code can damage or destroy data. section 11.4.3
Use authentication, authorization, and encryption, while considering regional privacy and anonymity requirements. section 12.5
Expose only the gateway publicly; keep internal services, RabbitMQ, and MongoDB inaccessible from outside the cluster unless adequately protected. section 12.5
A defensive microservice boundary
A scalable deployment exposes its gateway to customers while shielding internal microservices and infrastructure. Future hardening adds gateway authentication and HTTPS for customer communications. section 12.5
How Bootstrapping Microservices, Second Edition: With Docker, Kubernetes, GitHub Actions, and Terraform covers it
How deep it goes
Explains backups, restoration, source-data immutability, service boundaries, and core controls, but defers comprehensive security treatment.
Examples
Demonstrates automated backups, practiced restoration, three-place storage, gateway exposure, and shielding RabbitMQ and MongoDB.
What it assumes
Assumes an application or microservice deployment, while introducing core security controls and defensive data practices at a basic level.
What you can do after
Apply backups, restoration drills, immutable source capture, service isolation, authentication, authorization, and encryption.
How it connects
Connects data protection with backups, authentication, authorization, encryption, privacy, microservices, and HTTPS.
AI for Everyday ITCybersecurity is the practice of protecting digital systems, networks, applications, and data from threats and unauthorized activity.
Build AI-Enhanced Web AppsProtection of generative AI capabilities, application resources, and their outputs against unauthorized access, malicious misuse, and harmful exploitation.
The Art of AI Product DevelopmentCybersecurity is the practice of protecting computer systems, networks, software, and data from unauthorized access, disruption, alteration, or attack.
Effective Data AnalysisData protection is the safeguarding of personal information through controls on its collection, access, processing, storage, sharing, retention, and deletion.
Introduction to Generative AI, Second EditionSecurity is the protection of an AI system, its data, and its interactions from unauthorized access, manipulation, disruption, or attack.
Think Like a CTOAn operational setting in which systems, data, and activities are protected against unauthorized access, misuse, disruption, or compromise.
Machine Learning System DesignSecurity is the protection of a system, its models, data, and interfaces from unauthorized access, misuse, or compromise.
Spring Security in Action, Second EditionSoftware security is the protection of software applications and their data against unauthorized access, misuse, disruption, and other security threats.
Data-Driven CybersecurityInformation security is the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.
Azure SecurityCybersecurity is the practice of protecting digital systems, data, identities, applications, and networks from unauthorized access, disruption, or misuse.
Microsoft Azure in ActionSecurity is the protection of systems, data, applications, and infrastructure against unauthorized access, misuse, disruption, or damage.
Machine Learning Platform EngineeringSecurity is the protection of software, models, data, and infrastructure from unauthorized access, misuse, compromise, or attack.
encryptionuses · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
authorizationuses · Authorization is the determination and enforcement of rules governing which subjects may access resources or perform operations.
authenticationhas part · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
threat modelused by · A threat model is a structured analysis or representation of a system’s relevant threats, adversaries, assets, attack paths, assumptions, and possible mitigations.
AI agentused by · An AI agent is a computational system that uses artificial intelligence to interpret information, select actions, and pursue goals through interaction with an environment.
CIA triadmeasured by · The CIA triad is an information-security model comprising confidentiality, integrity, and availability as core protection objectives.
This explainer was generated by Manning's knowledge graph from the text of Bootstrapping Microservices, Second Edition: With Docker, Kubernetes, GitHub Actions, and Terraform. The section links point to the parts of the book it draws on.
