Morgan Stanley has been on the Agile transformation journey for a number of years. A key focus for its Technology Division is how to develop a set of DevOps tools and processes to enable and facilitate this transformation. In this presentation, we will look at 3 examples where teams came up with creative solutions to enhance the speed of software delivery, harmonize the collaboration of a global team of 500 developers working on the same code base, and leverage Environment on Demand for fully automated end-to-end testing.

摩根士丹利数年前开始进入敏捷开发转型，其技术团队的关注焦点之一即为怎样开发和设计一系列 DevOps 工具和进程，用以实现转型、加速转型。本场演讲中，我们将介绍 3 个案例，案例中的技术团队均引入了极具创意的解决方案，从而加速了软件交付、促进了全球共用同一代码库的 500 多名开发工程师之间的协作、并利用按需环境（Environment on Demand）充分实现了端到端测试的自动化。

Microservices are everywhere and when implemented properly can give significant architectural advantages. However there’s also the counter to this where concerns are not thought through and the bad or even ugly side of Microservices can emerge.

API Gateways are a key architectural pattern that solves a whole range of problems including routing and even security. They can be used off the shelf without considering the various factors and features - until you find yourself in a gun slinging outage.

We look at the reasons you should use an API Gateway, the patterns you can use and the problems it will solve for you. We will talk about the technical implementation details and concerns that are addressed in code for building API Gateways and the ugly side of getting things wrong. We will explore how testing with Gateways and Microservices is key, and cover the use of test containers and chaos engineering to ensure your ecosystem works as planned and scales effectively. After this talk you won’t be on the Wild West side of Microservices.

微服务架构如今随处可见，如应用得当，微服务可以带来极大的架构优势，然而，若使用中考虑不周，各种意想不到的缺陷和弊端便可能涌现。

API 网关作为一种新颖的架构形式，可以解决从路由设计到网络安全等诸多方面的一系列问题。API 网关可以开箱即用，令人欣喜，但如果你毫无顾忌地把它直接应用于任何系统，那么某天你可能会陷入令人手足无措的系统崩溃。

本场演讲中，我们将为你解读 API 网关的正确打开方式——在什么情况下应该使用 API 网关？具体如何使用？它可以帮你解决哪些问题？我们将探讨 API 网关构建过程中代码层面的技术细节和考量点，并揭示一些使用不当造成的常见弊端。我们将向你展示测试在网关和微服务使用中的重要性，同时，我们将带你探索测试容器和混沌工程的使用，从而确保你的系统生态可以正常运行并得到有效扩展。本场演讲之后，微服务于你将不再是未知领域。

Identity and Access Management (IAM) is one of the most complex challenges in the transformation of cloud adoption for a global financial institution like Morgan Stanley that faces the most rigid and constantly-changing regulatory environments across the world. A global technology platform with vast infrastructure, dispersed teams and countless applications only adds to the complexity. 

This presentation will provide an overview of IAM concepts and common challenges faced by multinational companies, and then dig into the IAM solutions in cloud environments. 

For identity management, we will cover methods of handling identity federation, authentication and Single Sign On (SSO). And for access management, we will discuss the idea of bridging access control solution on multiple clouds  for the realization of unified IAM.

对于摩根士丹利等国际金融机构而言，为了应对严格和多变的全球监管环境，云端身份和访问管理（Identity and Access Management, 或称 IAM）成为其云转型过程中复杂的技术难题之一。与此同时，其全球技术平台下庞大的基建架构、遍布全球的团队、以及不计其数的应用程序都使这种复杂性更为加剧。

本主题演讲将简单介绍身份和访问管理（IAM）的基本概念及跨国公司在此领域面临的共同挑战，然后深入探讨摩根士丹利在云端身份和访问管理（IAM）领域的解决方案。

针对身份管理，本演讲将涵盖联合身份验证（Identity Federation）、身份识别及单点登录（Single Sign On，或称SSO）；针对访问管理，本演讲将探讨多重云（Multiple Clouds）环境下的桥接访问控制解决方案，以期实现统一标准的身份和访问管理。