Further reading
These links provide further reading on hardening Docker and OS images:
- https://snyk.io/blog/tips-for-hardening-container-image-security-strategy/
- https://www.cisecurity.org/insights/blog/how-to-layer-secure-docker-containers-with-hardened-images
- https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html
- https://www.cisecurity.org/cis-hardened-images/amazon
These links provide further reading on WAFs:
- https://www.chakray.com/how-protect-your-apis-installing-configuring-modsecurity-nginx/
- https://owasp.org/www-project-modsecurity-core-rule-set/
- https://www.netnea.com/cms/apache-tutorial-7_including-modsecurity-core-rules/
- https://www.fastly.com/blog/the-waf-efficacy-framework-measuring-the-effectiveness-of-your-waf
- https://github.com/coreruleset/coreruleset
- https://en.wikipedia.org/wiki/Next-generation_firewall
- These links provide further reading on API gateways and API management:
- https...
