MsDO Weekplan 14

The learning goals for Week 49 are:

Security. Event Sourcing. Sharding and Scalable Storage. Exam Discussion.

Literature:

• [Newman, 2015] Cursory: Chapter 9
• [Vermeer, 2021] Cursory: Best practices to build Java container (Online)
• [Fowler, 2005] Cursory: Event Sourcing (Online)
• [Wikipedia, 2020] Optional. Sharding (Online)
• [Nygard, 2017] Optional. Chapter 17

Slides:

• W14-1 Security (powerpoint) // (PDF)
• W14-2 Event Sourcing (powerpoint) // (PDF)
• W14-3 Sharding (powerpoint) // (PDF)
• W14-4 Exam (powerpoint) // (PDF)

Notes for this weekplan:

The last week has several interesting-but-not-mandatory topics. I have selected to put emphasis on the security aspect, and building more secure docker containers in particular.

Exercise 'secure-container'

Analyze your 'Docker-multistage' IaC file for the SkyCave daemon in the light of the Vermeer article. What does it obey, and what not?

Update your Dockerfile to be (much more) in line with the recommendations by Snyk/Vermeer.

Exercise 'event-source-service'

Redesign your group's REST service to be complient with the event sourcing paradigm: never change state in persistent storage, record events instead.

Is it already following the paradigm? If yes, why?