Kworld Trend / To strengthen tanzu vmware seizes mesh7 network software, When the end user thinks of a modern application, they expect an offering that is easy to use, works on any device, from anywhere, and provides continuous innovation. To fulfill this expectation, under the hood are a large number of distributed components (and microcomponents) that manage heterogeneous workloads in hybrid environments.
Written by many different teams, in a multilingual style, access SaaS or public cloud data stores, integrated with 3rd party services, and deliver well-defined Service Level Agreements and Objectives (SLA/Os) to enable unparalleled end-user experience, in any place. In other words, modern applications are built quickly and efficiently, but have enormous variability and complexity within them.
The role of APIs in modern applications | To strengthen tanzu vmware seizes mesh7 network software
What brings all these different distributed and heterogeneous components of modern applications together are the APIs. Over the years, APIs have evolved from being a simple way to monetize applications or integrate with other applications, to extending an application’s capabilities by leveraging third-party services, to providing infrastructure in minutes (often referred to as “infrastructure as code”) ).
It becomes the data plane – essentially the central nervous system – that carries critical information and data from one part of the application to another. In other words, APIs have become an essential and essential component of modern applications. As such, modern applications cannot be managed and secured without managing and securing APIs.
Modern application security is a shared responsibility
As the number of workloads increases exponentially, the number of APIs between them also increases. What makes managing and securing APIs more difficult is the temporary nature of the workloads themselves.
All of this, in turn, presents risks to applications – the risks of not knowing what is running within the environment (lack of observability). Risks of breaches, exploitation of vulnerabilities and hijacking of resources. and the risk of losing important and sensitive data (data extraction). So who is mitigating these risks?
Is it the responsibility of the application owners to have a deeper knowledge of the structure of the application. Business logic, consumer and developer APIs?
Or is it the responsibility of security operators, as they are ultimately responsible for protecting all critical data, resources, and environments?
continued
The answer to this question lies somewhere in between. Security for modern applications. It is a joint responsibility of the application owners. Application operators, platform teams, and security operators.
As an application developer, you are required to write secure code using best practices. Consume APIs and services scanned for vulnerabilities. Deploy well-written and documented APIs with security in mind, and incorporate security testing into your development process.
As an application operator, you are required to provide developers with the necessary security tools. Properly vetted services and API gateways to ensure security is implemented early in the program.
development lifecycle, then monitor application behavior for security, compatibility, or SLO violations once they are published. Everyone must do their part without compromising the speed or efficiency that are hallmarks of modern applications.
API security within GNS
This is where Mesh7, VMware’s latest acquisition, offers value. It sits inside VMware Tenzo. Building a GNS (Global Namespace) for the Mesh Service. Mesh7’s API Security and Monitorability solution provides value to application operators and developers. It thus satisfies the DevSecOps collaboration use case, which is a fundamental security requirement for modern applications. There are also many other use cases and capabilities that Tanzo Service Mesh and Mesh7, respectively, address and showcase as well. To strengthen tanzu vmware seizes mesh7 network software
