Vattenfall · januari 2021 – juni 2022 · Cloud integration and IAM consultant
Secure self-service APIs with consistent access security
Standardizing self-service APIs and improving login security in a multicloud landscape.
The client question
Vattenfall moved APIs and services from on-premises environments to a multicloud landscape. For the self-service environments in the app and website, Identity & Access Management had to be applied consistently.
My role
Cloud integration and IAM consultant
My approach & contribution
My assignment was to standardize customer-oriented APIs for self-service. I applied STRIDE principles to the APIs and worked on improving the login process with PKCE, in conjunction with the API Management Gateway.
Technology
Azure, Azure API Management, PKCE, STRIDE, Identity & Access Management, Azure DevOps, Bicep, YAML, Cosmos DB
- azure
- api management
- api-integratie
- self-service
- iam
- security
- stride
- pkce
- multicloud
- cloud integration
- azure devops
- bicep
- yaml
- ci/cd
- cosmos db
- energie
