3 ms·
Surprised security wasn't mentioned as a reason to decouple services (IMO security is a top reason to split out a service). Otherwise I tend to agree with the
by optimiz3 11y ago
Surprised security wasn't mentioned as a reason to decouple services (IMO security is a top reason to split out a service).
Otherwise I tend to agree with the author.
- Spearchucker 11y agoCan you explain that a bit more? What added security benefits do micro services provide that couldn't be accomplished using role- or claim-based authorisation?
- jeffasinger 11y agoI'd guess that what he means is that an attacker who compromises one micro service may not end up compromising all of them, whereas if they compromise a monolith, they have access to everything.
- optimiz3 11y agoMachine separation for one (OS level exploits, escalation of privileges in one component compromising another). Network partitioning with strong protocol filters between security tiers can be invaluable.