Why it matters

In-transit encryption is baseline. Understanding shapes network design.

Advertisement

The architecture

Client → API: TLS 1.3.

Service → service: mTLS.

Cert management: cert-manager, ACM.

Encryption in transitClient-facingTLS 1.3InternalmTLSCertsauto-managedcert-manager + ACM automate cert lifecycle; short-lived certs preferred
In-transit.
Advertisement

How it works end to end

TLS 1.3 minimum.

mTLS for service-to-service.

Automated cert rotation.

OCSP stapling.