System designLevel 2
Security and privacy
Easynot started
Mediumnot started
Hardnot started
Security architectureLetting an app access your data without ever giving it your password.3 minRBAC vs ABACMoving from rigid roles to dynamic, context-aware attributes.3 minAPI keys, OAuth and credential rotationA credential is not a login. It is something you issue, scope, age and revoke, and whether anyone ever replaces it comes down to one question: can two of them be valid at once?10 minSecrets managementA database password baked into source code is a password everyone with the repo already knows.4 minSingle sign-on (SSO)Log in once, access everything without managing a hundred passwords.3 minAPI key issuance and authSecurely handing out long-lived credentials to developers.3 minCertificate chains in PKITrust one root, and you can verify a stranger's identity by following signatures up the chain.3 minDDoS mitigationSurviving a flood of malicious traffic designed to take you offline.3 minDesigning team file shareSeparate the heavy thing from the words about it, bytes go to the warehouse, the index card goes in the drawer.3 minJust-in-time privileged accessDon't hand someone the master key and hope they hand it back, lend it for the job, then take it back automatically when the clock runs out.3 minTokenizing PIISwap a sensitive value for a meaningless token, and keep the real data locked in a vault.3 minWAF bot detectionScore every request on how bot-like it looks, then let it in, slow it down with a challenge, or turn it away.4 min