Non-in line data monitoring and security services

A system, comprising:

• a processor configured to:
• receive a communication for a data source at a sidecar, wherein the communication corresponds to end user credentials for an end user, wherein the sidecar includes a dispatcher and at least one service, wherein the dispatcher receives the communication and being data agnostic, wherein the communication is received from a proxy, wherein the proxy mirrors the communication such that the communication is provided to the data source and the sidecar, and wherein the at least one service includes an authentication service;
• provide the communication from the dispatcher to the data source and to the at least one service, the at least one service inspecting the communication, comprising to:
• hold the communication at the dispatcher;
• determine whether the at least one service has been completed;
• and
• in the event that the at least one service has been completed, forward, via the proxy, the communication to the data source;
• perform a function by the at least one service based on the communication, wherein:
• the function includes authentication of a requester of the data source;
• the requester is a client;
• and
• the performing of the function includes to:
• determine whether the client is authorized to access the data source using the authentication service;
• and
• notify the proxy in the event that the client is not authorized to access the data source;
• and
• authenticate, using the at least one service, the end user based on the end user credentials and utilizing federated identity management;
• and
• a memory coupled to the processor and configured to provide the processor with instructions.

A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• receiving a communication for a data source at a sidecar, wherein the communication corresponds to end user credentials for an end user, wherein the sidecar includes a dispatcher and at least one service, wherein the dispatcher receives the communication and being data agnostic, wherein the communication is received from a proxy, wherein the proxy mirrors the communication such that the communication is provided to the data source and the sidecar, and wherein the at least one service includes an authentication service;
• providing the communication from the dispatcher to the data source and to the at least one service, the at least one service inspecting the communication, comprising:
• holding the communication at the dispatcher;
• determining whether the at least one service has been completed;
• and
• in the event that the at least one service has been completed, forwarding, via the proxy, the communication to the data source;
• performing a function by the at least one service based on the communication, wherein:
• the function includes authentication of a requester of the data source;
• the requester is a client;
• and
• the performing of the function includes:
• determining whether the client is authorized to access the data source using the authentication service;
• and
• notifying the proxy in the event that the client is not authorized to access the data source;
• and
• authenticating, using the at least one service, the end user based on the end user credentials and utilizing federated identity management.