Securing Northwind's Kafka streaming pipeline end to end: producers pass three gates — authenticate with mTLS or SASL, authorize with an ACL per principal, encrypt with TLS — while an unauthenticated script is refused; inside the cluster the orders and payments topics flow and the payroll topic is isolated, with the schema registry validating every message; consumers read only what they are allowed and analytics is denied payroll; monitoring raises an alert on the denied read; and the fixes — the PLAINTEXT listener on 9092 closed, the RabbitMQ guest account disabled and the orders service cut down to write-only.

CY-MID-099Mid Level · Streaming Security

Event Streaming & Message Queue Security — The Streaming Pipeline

A hands-on mid-level course that secures Kafka and the message queues at the heart of modern systems. Work the streaming pipeline - eight stages: Authenticate, Authorize, Encrypt, Topics, Schema, Producers, Consumers, and Monitor - locking down brokers, topics, and data in motion so the event backbone is not wide open. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Authenticate and authorize brokers, producers, and consumers.
Encrypt data in transit and secure topics with ACLs.
Govern schemas and validate producer and consumer trust.
Monitor the streaming platform for abuse.

Price:৳8,000