My platform team supports devs with a proxy that handles authN & authZ. Service to service is secured using mTLS automatically. I’ve stated it previously in th

My platform team supports devs with a proxy that handles authN & authZ. Service to service is secured using mTLS automatically. I’ve stated it previously in the thread - you need to enforce conventions through tooling - which is where “devops” (ugh, I know, but really...) comes in to play. We try to view the tooling platform as just another DDD domain.