Design zero-trust security architecture for PayU microservices.
npx skills add https://github.com/fajjarnr/payu --skill cybersecurity-architect
Please help me install this Agent Skill. Skill: cybersecurity-architect Source: https://github.com/fajjarnr/payu/tree/main/.agent/skills/cybersecurity-architect Command: npx skills add https://github.com/fajjarnr/payu --skill cybersecurity-architect
PayU faces complex IAM, PKI, and zero-trust security challenges across microservices, requiring a cohesive architecture to protect data, enforce access controls, and comply with PCI-DSS.
Configure IdP (Keycloak or similar), enable MFA, set up RBAC, and implement mTLS with a secrets manager.
High-intent search queries and answers about installing and using this skill.
Zero-trust architecture for cloud-native microservices is implemented using mutual TLS, network segmentation, device posture checks, and strict key management. This skill provides reference patterns to enforce these controls across distributed services.
Keycloak integration for RBAC and OAuth2 involves configuring an Identity Provider, enabling MFA strategies, and validating OIDC/OAuth2 tokens across services. This skill guides IdP setup and role-based access design for secure authentication flows.
Aligning microservice coding with PCI-DSS and OWASP requires integrating secure coding patterns and compliance governance across the development lifecycle. This skill provides guidance to satisfy encryption and access control requirements for payment data.
Yes, you can use ABAC and RBAC models together within Identity and Access Management. This skill covers designing both role-based and attribute-based access controls to enforce granular permissions across microservices.
Yes, a secrets manager is needed to handle certificates and keys for mutual TLS across microservices. This skill outlines configuring mTLS alongside a secrets manager to establish secure service-to-service communication.
JWT validation across services in a distributed system works by verifying token signatures and claims issued via OIDC and OAuth2 flows. This skill provides example workflows for implementing secure token validation across microservices.
darellchua2Provision and manage Keycloak IAM resources with OpenTofu/Terraform code.
camoneartEnforce PCI DSS compliance for payment card data handling.
missBergIntegrate Envoy Gateway with Istio ambient or Cilium service mesh for unified ingress and east-west traffic management.
berTrindadeEnforce secure Terraform secrets handling and least-privilege network access.
