Defense in Depth: Security Layers

Overview

Build a multi-layered security architecture with WAF, firewall, encryption, and rate limiting.

Security is not one thing - it's layers.

You will build 6 architecture steps that model production dependencies.

You will run 1 failure experiment to observe bottlenecks and recovery behavior.

Success target: Multiple security layers active, attacks blocked at edge, data encrypted.

Learning Objectives

• Understand defense-in-depth security architecture
• Know the roles of firewall, WAF, rate limiter, and encryption
• Learned why no single security layer is sufficient
• Experienced the impact of disabling security layers

Prerequisites

• Topic Hub: defense in depth
• Chapter 30: Security & Authentication
• Prior Lab: API Gateway & Authentication

Experiments

1. Disable WAF block mode to see what happens with attacks