ABSTRACT
This chapter discusses two complementary concepts, Microservices architecture (MSA) security and MSA migration. It also aims to understand how security in MSA differs from that of conventional systems and shows how different security mechanisms are implemented in a MSA application using reference architecture. The chapter also discusses the basic security requirements of any application, describes how the architecture of MSA applications differs from that of a conventional application, and suggests how security mechanisms can be implemented in a MSA application. It explores the basic needs of MSA migration, motivating factors for MSA migration, issues associated with MSA migration, the migration process, and candidate applications for MSA migration. In MSA, the application is broken into independent services, and each service has its own data. A large e-commerce application consists of multiple services and service instances that are running on multiple machines. Communicating via APIs, microservices reduce software complexity, scale vertically, and provide increased flexibility, speed, and resiliency.
