Microservices Security in Action teaches you how to secure your microservices applications code and infrastructure. After a straightforward introduction to the challenges of microservices security, you’ll learn fundamentals to secure both the application perimeter and service-to-service communication. Following a hands-on example, you’ll explore how to deploy and secure microservices behind an API gateway as well as how to access microservices accessed by a single-page application (SPA).
Along the way, authors and software security experts Prabath Siriwardena and Nuwan Dias shine a light on important concepts like throttling, analytics gathering, access control at the API gateway, and microservice-to-microservice communication. You’ll also discover how to securely deploy microservices using state-of-the-art technologies including Kubernetes, Docker, and the Istio service mesh. Lots of hands-on exercises secure your learning as you go, and this straightforward guide wraps up with a security process review and best practices. When you’re finished reading, you’ll be planning, designing, and implementing microservices applications with the priceless confidence that comes with knowing they’re secure!
what's inside
Key microservices security fundamentals
Securing service-to-service communication with mTLS and JWT
Deploying and securing microservices with Docker
Using Kubernetes security
Securing event-driven microservices
Using the Istio Service Mesh
Applying access control policies with OPA
Microservices security best practices
Building a single-page application to talk to microservices
Static code analysis, dynamic testing, and automatic security testing

The Design of Web APIs introduces you to the challenging and creative world of API design. In this experience-driven guide, you'll learn to think like an API designer, embracing effective practices for requirements gathering, blending business and technical goals, and adopting a consumer-first mindset. You'll master the lifecycle of web API design, including the all-important secure-by-design approach. This book teaches principles that can be applied in any style of API. Most examples are illustrated using REST and the OpenAPI specification.
what's inside
Characteristics of a well-designed API
Explore the full API design lifecycle
Designing user-oriented APIs
Secure APIs by design
Evolving existing APIs
Validating your API designs

The Official Google Cloud Certified Associate Cloud Engineer Study Guide, provides everything you need to prepare for this important exam and master the skills necessary to land that coveted Google Cloud Engineering certification. Beginning with a pre-book assessment quiz to evaluate what you know before you begin, each chapter features exam objectives and review questions, plus the online learning environment includes additional complete practice tests. Written by Dan Sullivan, a popular and experienced online course author for machine learning, big data, and Cloud topics, Official Google Cloud Certified Associate Cloud Engineer Study Guide is your ace in the hole for deploying and managing Google Cloud Services.
Select the right Google service from the various choices based on the application to be built
Compute with Cloud VMs and managing VMs
Plan and deploying storage
Network and configure access and security
Google Cloud Platform is a leading public cloud that provides its users to many of the same software, hardware, and networking infrastructure used to power Google services. Businesses, organizations, and individuals can launch servers in minutes, store petabytes of data, and implement global virtual clouds with the Google Cloud Platform. Certified Associate Cloud Engineers have demonstrated the knowledge and skills needed to deploy and operate infrastructure, services, and networks in the Google Cloud. This exam guide is designed to help you understand the Google Cloud Platform in depth so that you can meet the needs of those operating resources in the Google Cloud.

Take your Go skills to the next level by learning how to design, develop, and deploy a distributed service. Start from the bare essentials of storage handling, then work your way through networking a client and server, and finally to distributing server instances, deployment, and testing. All this will make coding in your day job or side projects easier, faster, and more fun.
Lay out your applications and libraries to be modular and easy to maintain. Build networked, secure clients and servers with gRPC. Monitor your applications with metrics, logs, and traces to make them debuggable and reliable. Test and benchmark your applications to ensure they’re correct and fast. Build your own distributed services with service discovery and consensus. Write CLIs to configure your applications. Deploy applications to the cloud with Kubernetes and manage them with your own Kubernetes Operator.
Dive into writing Go and join the hundreds of thousands who are using it to build software for the real world.

Obtain all the skills you need to configure and manage a PostgreSQL database. In this book you will begin by installing and configuring PostgreSQL on a server by focusing on system-level parameter settings before installation. You will also look at key post-installation steps to avoid issues in the future. The basic configuration of PostgreSQL is tuned for compatibility rather than performance. Keeping this in mind, you will fine-tune your PostgreSQL parameters based on your environment and application behavior. You will then get tips to improve database monitoring and maintenance followed by database security for handling sensitive data in PostgreSQL.
Every system containing valuable data needs to be backed-up regularly. PostgreSQL follows a simple back-up procedure and provides fundamental approaches to back up your data. You will go through these approaches and choose the right one based on your environment. Running your application with limited resources can be tricky. To achieve this you will implement a pooling mechanism for your PostgreSQL instances to connect to other databases. Finally, you will take a look at some basic errors faced while working with PostgreSQL and learn to resolve them in the quickest manner.
What You Will Learn
Configure PostgreSQL for performance
Monitor and maintain PostgreSQL instances
Implement a backup strategy for your data
Resolve errors faced while using PostgreSQL
Who This Book Is For
Readers with basic knowledge of PostgreSQL who wish to implement key

Key Features
Newly updated edition, covering the latest PostgreSQL 12 features with hands-on industry-driven recipes
Create a PostgreSQL cluster that stays online even when disaster strikes
Learn how to avoid costly downtime and data loss that can ruin your business
Book Description
Databases are nothing without the data they store. In the event of an outage or technical catastrophe, immediate recovery is essential. This updated edition ensures that you will learn the important concepts related to node architecture design, as well as techniques such as using repmgr for failover automation. From cluster layout and hardware selection to software stacks and horizontal scalability, this PostgreSQL cookbook will help you build a PostgreSQL cluster that will survive crashes, resist data corruption, and grow smoothly with customer demand.
You’ll start by understanding how to plan a PostgreSQL database architecture that is resistant to outages and scalable, as it is the scaffolding on which everything rests. With the bedrock established, you'll cover the topics that PostgreSQL database administrators need to know to manage a highly available cluster. This includes configuration, troubleshooting, monitoring and alerting, backups through proxies, failover automation, and other considerations that are essential for a healthy PostgreSQL cluster. Later, you’ll learn to use multi-master replication to maximize server availability. Later chapters will guide you through managing major version upgrades without downtime.
By the end of this book, you’ll have learned how to build an efficient and adaptive PostgreSQL 12 database cluster.
What you will learn
Understand how to protect data with PostgreSQL replication tools
Focus on hardware planning to ensure that your database runs efficiently
Reduce database resource contention with connection pooling
Monitor and visualize cluster activity with Nagios and the TIG (Telegraf, InfluxDB, Grafana) stack
Construct a robust software stack that can detect and avert outages
Use multi-master to achieve an enduring PostgreSQL cluster
Who this book is for
This book is for Postgres administrators and developers who are looking to build and maintain a highly reliable PostgreSQL cluster. Although knowledge of the new features of PostgreSQL 12 is not required, a basic understanding of PostgreSQL administration is expected.

Kubernetes in Action, Second Edition teaches you to use Kubernetes to deploy container-based distributed applications. You'll start with an overview of how Docker containers work with Kubernetes and move quickly to building your first cluster. You'll gradually expand your initial application, adding features and deepening your knowledge of Kubernetes architecture and operation. In this revised and expanded second edition, you’ll take a deep dive into the structure of a Kubernetes-based application and discover how to manage a Kubernetes cluster in production. As you navigate this comprehensive guide, you'll also appreciate thorough coverage of high-value topics like monitoring, tuning, and scaling.
what's inside
Up and running with Kubernetes
Deploying containers across a cluster
Securing clusters
Updating applications with zero downtime

Companies are spending billions on machine learning projects, but it’s money wasted if the models can’t be deployed effectively. In this practical guide, Hannes Hapke and Catherine Nelson walk you through the steps of automating a machine learning pipeline using the TensorFlow ecosystem. You’ll learn the techniques and tools that will cut deployment time from days to minutes, so that you can focus on developing new models rather than maintaining legacy systems.
Data scientists, machine learning engineers, and DevOps engineers will discover how to go beyond model development to successfully productize their data science projects, while managers will better understand the role they play in helping to accelerate these projects. The book also explores new approaches for integrating data privacy into machine learning pipelines.
Understand the machine learning management lifecycle
Implement data pipelines with Apache Airflow and Kubeflow Pipelines
Work with data using TensorFlow tools like ML Metadata, TensorFlow Data Validation, and TensorFlow Transform
Analyze models with TensorFlow Model Analysis and ship them with the TFX Model Pusher Component after the ModelValidator TFX Component confirmed that the analysis results are an improvement
Deploy models in a variety of environments with TensorFlow Serving, TensorFlow Lite, and TensorFlow.js
Learn methods for adding privacy, including differential privacy with TensorFlow Privacy and federated learning with TensorFlow Federated
Design model feedback loops to increase your data sets and learn when to update your machine learning models

Although salary surveys worldwide regularly identify software architect as one of the top ten best jobs, no decent guides exist to help developers become architects. Until now. This practical guide provides the first comprehensive overview of software architecture’s many aspects. You’ll examine architectural characteristics, architectural patterns, component determination, diagramming and presenting architecture, evolutionary architecture, and many other topics.
Authors Neal Ford and Mark Richards help you learn through examples in a variety of popular programming languages, such as Java, C#, JavaScript, and others. You’ll focus on architecture principles with examples that apply across all technology stacks.

AI is complicated, but cloud providers have stepped in to make it easier, offering free (or affordable) state-of-the-art models and training tools to get you started. In this book, AI novices will learn how to use Google’s AI-powered cloud services to do everything from analyzing text, images, and video to creating a chatbot.
Author Micheal Lanham takes you step-by-step through building models, training them, and then expanding on them to accomplish increasingly complex tasks. If you have a good grasp of math and the Python language, this book will get you up and running with Google Cloud Platform, whether you’re looking to build a simple business AI application or an AI assistant.
Learn key concepts for data science, machine learning, and deep learning
Explore tools like Video AI, AutoML Tables, the Cloud Inference API, the Recommendations AI API, and BigQuery ML
Perform image recognition using CNNs, transfer learning, and GANs
Build a simple language processor using embeddings, RNNs, and Bidirectional Encoder
Representations from Transformers (BERT)
Use Dialogflow to build a chatbot
Analyze video with automatic video indexing, face detection, and TF Hub

Microservices can be complicated and difficult to manage, but there’s a ready solution to this problem. With this practical guide, Lin Sun and Daniel Berg explain how service meshes can help you control interactions between the services in your application. You’ll explore what a service mesh is and how it works using Istio, an open source service mesh for managing and securing microservices.
Ideal for application developers, DevOps engineers, SecOps engineers, and others responsible for the delivery of containers and microservices, this guide takes an incremental adoption approach with Istio so you can adopt various features gradually and still reap the benefits. You’ll learn Istio’s architecture and explore its capabilities for observing microservices and dealing with their interactions.
Learn how a service mesh manages microservices and helps you innovate faster
Explore Istio’s observability, traffic management, and security capabilities
Add services to a mesh incrementally in a brownfield application
Use Istio to manage secure communication between services
Control how traffic flows into and out of the mesh and between services

AWS Security is an invaluable guide that you’ll want to have on hand when you’re facing any cloud security problem. With a cookbook-style delivery, it’s filled with well-documented examples and procedures you can apply to common AWS security issues. This book covers best practices for access policies, data protection, auditing, continuous monitoring, and incident response. You’ll also explore several deliberately insecure applications, including a social media site and a mobile app, learning the exploits and vulnerabilities commonly used to attack them and the security practices to counter those attacks. With this practical primer, you’ll be well prepared to evaluate your system’s security, detect threats, and respond with confidence.
what's inside
Securely grant access to AWS resources to coworkers and customers
Develop policies for ensuring proper access controls
Lock-down network controls using VPCs
Record audit logs and use them to identify attacks
Track and assess the security of an AWS account
Common attacks and vulnerabilities

In this fully updated and new edition, you'll get hands-on practice with the basics, including setting up cloud-based virtual machines, deploying web servers, and using hosted data stores. As you work through the book's 21 carefully planned lessons, you'll explore big-picture concerns like security, scaling, and automation.
Learn Azure in a Month of Lunches, Second Edition teaches you the most important skills you'll need to write, deploy, and run cloud-based applications in Azure.

Organizations today often struggle when trying to balance business requirements with ever-increasing volumes of data. Yet the need to take advantage of real-time data continues to grow among the most competitive digital industries. Conventional system architectures may not be up to the task. With this practical guide, you’ll learn how to leverage large-scale data usage across the business units in your organization using the principles of event-driven microservices.
Author Adam Bellemare from Flipp takes you through the process of building a complete microservice-powered organization. You’ll reconsider how data is produced, accessed, and used across your organization. Discover powerful yet simple patterns for unlocking the value of this data. Incorporate event-driven design and architectural principles into your own systems. And completely rethink how your organization delivers value by unlocking real-time access to data at scale.
You’ll learn:
How to leverage event-driven architectures to deliver exceptional business value
The role of microservices in supporting event-driven design
Architectural patterns to ensure success both within and between teams in your organization
Application patterns for developing powerful event-driven microservices

As computation continues to move into the cloud, the computing platform of interest no longer resembles a pizza box or a refrigerator, but a warehouse full of computers. These new large datacenters are quite different from traditional hosting facilities of earlier times and cannot be viewed simply as a collection of co-located servers. Large portions of the hardware and software resources in these facilities must work in concert to efficiently deliver good levels of Internet service performance, something that can only be achieved by a holistic approach to their design and deployment. In other words, we must treat the datacenter itself as one massive warehouse-scale computer (WSe. We describe the architecture of WSCs, the main factors influencing their design, operation, and cost structure, and the characteristics of their software base. We hope it will be useful to architects and programmers of today's WSCs, as well as those of future many-core platforms which may one day implement the equivalent of today's WSCs on a single board. Table of Contents: Introduction / Workloads and Software Infrastructure / Hardware Building Blocks / Datacenter Basics / Energy and Power Efficiency / Modeling Costs / Dealing with Failures and Repairs / Closing Remarks

Enterprise Java Microservices teaches you to design and build JVM-based microservices applications. You'll start by learning how microservices designs compare to traditional Java EE applications. Always practical, author Ken Finnigan introduces big-picture concepts along with the tools and techniques you'll need to implement them. You'll discover ecosystem components like Netflix Hystrix for fault tolerance and master the Just enough Application Server (JeAS) approach. To ensure smooth operations, you'll also examine monitoring, security, testing, and deploying to the cloud.

GraphQL is a new way of structuring and building web services, and the result is transformational. Find out how to offer a more tailored, cohesive experience to your users, easily aggregate data from different data sources, and improve your back end’s maintainability with Absinthe’s declarative approach to defining how your API works.
Build a GraphQL-based API from scratch using Absinthe, starting from core principles. Learn the type system and how to expand your schema to suit your application’s needs. Discover a growing ecosystem of tools and utilities to understand, debug, and document your API. Take it to production, but do it safely with solid best practices in mind. Find out how complexity analysis and persisted queries can let you support your users flexibly, but responsibly too. Along the way, discover how Elixir makes all the difference for a high performance, fault-tolerant API. Use asynchronous and batching execution, or write your own custom add-ons to extend Absinthe. Go live with subscriptions, delivering data over websockets on top of Elixir (and Erlang/OTP’s) famous solid performance and real-time capabilities.
Transform your applications with the powerful combination of Elixir and GraphQL, using Absinthe.

Imagine what you could do if scalability wasn't a problem. With this hands-on guide, you’ll learn how the Cassandra database management system handles hundreds of terabytes of data while remaining highly available across multiple data centers. This third edition—updated for Cassandra 4.0—provides the technical details and practical examples you need to put this database to work in a production environment.
Authors Jeff Carpenter and Eben Hewitt demonstrate the advantages of Cassandra’s nonrelational design, with special attention to data modeling. If you’re a developer, DBA, or application architect looking to solve a database scaling issue or future-proof your application, this guide helps you harness Cassandra’s speed and flexibility.
Understand Cassandra’s distributed and decentralized structure
Use the Cassandra Query Language (CQL) and cqlsh—the CQL shell
Create a working data model and compare it with an equivalent relational model
Develop sample applications using client drivers for languages including Java, Python, and Node.js
Explore cluster topology and learn how nodes exchange data

With an emphasis on clarity, style, and performance, author J.T. Wolohan expertly guides you through implementing a functionally-influenced approach to Python coding. You'll get familiar with Python's functional built-ins like the functools operator and itertools modules, as well as the toolz library.
Mastering Large Datasets teaches you to write easily readable, easily scalable Python code that can efficiently process large volumes of structured and unstructured data. By the end of this comprehensive guide, you'll have a solid grasp on the tools and methods that will take your code beyond the laptop and your data science career to the next level!

Knative in Action shows you how to build more complex and capable serverless applications with Knative. You’ll start by getting up to speed with the basics of serverless computing, Knative’s design concepts, and the tricky problems that the toolkit works to simplify. Next, Knative expert Jacques Chester takes you through how to use Knative Serving to build your systems, baking in autoscaling, auto-updating, and easy deployment right from the start. From there you’ll learn how to use Knative Eventing to wire together disparate systems into an elegant, functional whole. Finally, you'll learn how Knative can be used to smooth your shipping pipeline, from initial development right through to monitoring your software in production.
what's inside
Deploying a service with Knative Serving
Connecting systems with Knative Eventing
Autoscaling for differing server loads
Developing, shipping, and operating software with Knative