Why Key Vault and not just environment variables, creating a vault with RBAC, integration with IConfiguration through AddAzureKeyVault, and prefix filtering for Key Vaults per environment.
Citește mai mult
Why connection strings and API keys in appsettings.json are a problem. Managed Identity for Azure App Service and Azure Functions. DefaultAzureCredential in practice. Access to Cosmos DB, Blob Storage, and Key Vault without any stored secret.
Citește mai mult
The difference between lift & shift and cloud-native, the 12 factors applied in .NET, stateless services, configuration externalization, health checks, and graceful shutdown.
Citește mai mult
15 articles, a single common thread: how to build a secure ASP.NET Core system from scratch. A narrative retrospective that connects all the concepts — from Security by Design to Audit Logging — into a coherent arc.
Citește mai mult
How to implement audit logging and record security events in ASP.NET Core: what needs to be logged, the structure of an audit log, integration with Application Insights and Azure Monitor, automatic alerting, and GDPR compliance.
Citește mai mult
Built-in rate limiting in ASP.NET Core: Fixed Window, Sliding Window, Token Bucket, and Concurrency Limiter. Global and per-endpoint configuration, per-user policies, 429 responses, and integration with Azure API Management.
Citește mai mult
Blazor WebAssembly changes the security rules: your .NET code runs in the client's browser. Authentication with OIDC, protection of sensitive data, securing API calls, and what you can never hide in WASM.
Citește mai mult
The most common web vulnerabilities — CSRF, XSS, and Injection — clearly explained with examples of attacks and complete implementation of defense in ASP.NET Core. From antiforgery tokens to Content Security Policy and SQL parameterization.
Citește mai mult
