Defense in depth.
also: defence in depth · layered securitySeveral independent layers of security controls (perimeter, network, application, data, monitoring), so one failure isn't a breach.
the two-minute refresher
- Perimeter: WAF, DDoS protection, rate limits.
- Network: VPCs, security groups, private subnets for databases.
- Application: authentication, authorization, input validation. Data: encryption and key management.
- Monitoring: audit logs and anomaly detection catch what got through.