Platforms for Secure API Connectivity With Architecture as Code

As microservices and complex platforms become the standard, ensuring secure connectivity while maintaining a smooth developer experience is a significant challenge. Traditional security models often introduce friction, slowing down innovation and deployment. Regulated industries must balance stringent security controls with the need for agility.

In this session, you will learn how Architecture as Code with CALM, an open-source initiative from FINOS, provides a structured approach to defining Patterns and Architectures that incorporate security and resilience from the start. You will see how CALM CLI can generate and validate architectures against predefined patterns, ensuring security compliance without compromising developer experience.

Through a live demo, you will observe how an initial deployment lacks security and how a threat model can be applied to highlight vulnerabilities. You will then learn how controls enforce security requirements, including Zero Trust principles  to lock down the cluster. Finally, you will discover CalmHub and the Visualizer, tools that help review and maintain architectures over time.

Attendees will leave with a practical understanding of how to adopt Architecture as Code to streamline secure API connectivity, making compliance and security part of their deployment process.

Key Takeaways:

• Understanding the risks and complexity of secure API connectivity
• How CALM enables secure-by-design architectures
• Practical demonstration of CALM CLI and security controls
• Zero Trust and network segmentation in a microservices environment
• Visualizing and managing architectures with CalmHub

Target Audience: 
Architects, platform engineers, DevSecOps professionals, and developers working in regulated environments or those seeking to improve security automation in their platforms.