Connections to other systems.
WHAT TO ESTABLISH FOR EACH
What data is sent What is received How it authenticates What happens when it fails
WHAT TO STORE SECURELY
Keys and credentials, outside code and version control.
WHAT TO RESTRICT
Key permissions, to the minimum required.
WHY
A key with full access is a complete compromise if leaked.
WHAT TO SET
Timeouts on every call Retry limits A circuit breaker for repeated failure
WHAT TO VALIDATE
Every response.
WHY
External services change, return errors, and occasionally return something unexpected.
WHAT TO NEVER DO
Trust a response enough to use it in a query or a command unescaped Assume a response structure without checking
WHAT TO VERIFY ON INCOMING WEBHOOKS
The signature, using the shared secret.
WHY
An unverified webhook endpoint accepts anything from anyone.
WHAT ELSE TO IMPLEMENT ON WEBHOOKS
Replay protection Safe repeated processing
WHAT TO LOG
Every integration call and its outcome.
WHAT TO PLAN
Operating when the integration is unavailable.
