Preguntas y Respuestas sobre Responsabilidad Compartida y Seguridad en Cloud Native

// Java: Configuración de TLS en un cliente HTTP
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManagerFactory;
import javax.net.ssl.KeyManagerFactory;
import java.security.KeyStore;

public class HttpClientConfig {
    public static void main(String[] args) throws Exception {
        KeyStore keyStore = KeyStore.getInstance("PKCS12");
        keyStore.load(new FileInputStream("client.p12"), "password".toCharArray());
        
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
        tmf.init(keyStore);
        
        SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(null, tmf.getTrustManagers(), null);
        HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
    }
}

# Python: Ejemplo de autenticación con JWT
import jwt
from datetime import datetime, timedelta

SECRET_KEY = 'your_secret_key'

def create_token(user_id):
    payload = {
        'user_id': user_id,
        'exp': datetime.utcnow() + timedelta(hours=1)
    }
    return jwt.encode(payload, SECRET_KEY, algorithm='HS256')

token = create_token('123')
print(token)

// C#: Ejemplo de configuración de Security Group
using Amazon.EC2;
using Amazon.EC2.Model;

var ec2Client = new AmazonEC2Client();
var request = new CreateSecurityGroupRequest
{
    GroupName = "MySecurityGroup",
    Description = "My Security Group"
};
var response = ec2Client.CreateSecurityGroupAsync(request).Result;

// TypeScript: Ejemplo de asignación de IAM Role
import AWS from 'aws-sdk';

const iam = new AWS.IAM();

const roleParams = {
    RoleName: 'MyRole',
    AssumeRolePolicyDocument: JSON.stringify({
        Version: '2012-10-17',
        Statement: [
            {
                Effect: 'Allow',
                Principal: {
                    Service: 'ec2.amazonaws.com'
                },
                Action: 'sts:AssumeRole'
            }
        ]
    })
};

iam.createRole(roleParams, (err, data) => {
    if (err) console.log(err, err.stack);
    else console.log(data);
});

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import java.util.Base64;

public class DataEncryption {
    public static void main(String[] args) throws Exception {
        KeyGenerator keyGen = KeyGenerator.getInstance("AES");
        SecretKey secretKey = keyGen.generateKey();
        
        Cipher cipher = Cipher.getInstance("AES");
        cipher.init(Cipher.ENCRYPT_MODE, secretKey);
        
        String data = "Sensitive data";
        byte[] encryptedData = cipher.doFinal(data.getBytes());
        String encodedData = Base64.getEncoder().encodeToString(encryptedData);
        
        System.out.println("Encrypted Data: " + encodedData);
    }
}

# Python: Ejemplo de uso de consultas preparadas
import sqlite3

connection = sqlite3.connect('database.db')
cursor = connection.cursor()

user_id = 1
cursor.execute("SELECT * FROM users WHERE id = ?", (user_id,))
result = cursor.fetchone()
print(result)

// TypeScript: Ejemplo de configuración de HTTPS en un servidor Express
import express from 'express';
import https from 'https';
import fs from 'fs';

const app = express();

const options = {
    key: fs.readFileSync('server.key'),
    cert: fs.readFileSync('server.cert')
};

https.createServer(options, app).listen(443, () => {
    console.log('Server running on port 443');
});

# Python: Ejemplo de cifrado de datos en reposo
from cryptography.fernet import Fernet

key = Fernet.generate_key()
cipher_suite = Fernet(key)

data = b"Sensitive data"
cipher_text = cipher_suite.encrypt(data)

print(f"Encrypted data: {cipher_text}")