# Secure your GraphQL Microservices

DevFeed: [Secure your GraphQL Microservices](<https://devfeed.tech/articles/secure-your-graphql-microservices-23510.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/secure-your-graphql-microservices>)

Author: Dylan Anthony

Published: 2023-07-31T13:51:52Z

Content type: article

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Microservices](<https://devfeed.tech/topics/microservices.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [announcement](<https://devfeed.tech/tags/announcement.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [router](<https://devfeed.tech/tags/router.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This article explains how to secure GraphQL federation when using microservices. It describes the risks of allowing clients to query subgraphs directly and recommends routing access through a controlled router, adding authorization, and using unique shared secrets per subgraph according to least-privilege principles.

## Source excerpt

Federation unlocks superpowers for our queries, enabling us to split up business logic and improve performance with features like . However, these same powers can be abused if placed in the wrong hands, so it's essential to limit who has access to them. The threats Many coordination features of a federated graph rely on an important assumption: clients always query your router--never individual subgraphs.