Document designed to help application developers, architects develop a vendor-neutral reference architecture foundation
The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, announced the publication of Microservices Architecture Pattern: A Proposed Architectural Pattern to Engineer Trustworthy Secure Systems. With the goal of developing a vendor-neutral reference architecture foundation that can be broken down into software architecture patterns, the document describes the key elements of the Microservices Architecture Pattern (MAP) and how they should be designed and deployed to shift security and compliance left via a continuous compliance-as-code approach.
Developed by the Application Containers and Microservices Working Group, the guidance gives application developers and architects, as well as anyone responsible for or interested in application containers and microservices security, a repeatable approach to architecting, developing, and deploying MAP. It contains all the information necessary for a microservice to operate independently and communicate with other microservices as it evolves to become an application component.
Recommended ITech News: Nifty Games Raises $38 Million in New Capital to Redefine Mobile Sports Games as NFL Clash and NBA Clash Move Towards Worldwide Release
“With this document, we are attempting to span the last leg of ‘shift left’ by applying control overlays to software before the code exits the development environment. To ensure that security is properly embedded from the very beginning of the development process, it’s imperative that teams can debate security and software design simultaneously,” said Anil Karmel, the paper’s co-editor and Application Containers and Microservices Working Group co-chair.
The Application Containers and Microservices Working Group was established to conduct research on the security of application containers and microservices and publish guidance and best practices for the secure use of application containers and microservices. The working group builds upon the work done by the joint NIST/CSA Applications Container Security, developed by the NIST Cloud Security Working Group. Individuals interested in becoming involved in the future research and initiatives of this group are invited to do so by visiting the Join page.
Recommended ITech News: Kroll Partners with SentinelOne to Accelerate Investigations and Response to Ransomware and Advanced Attacks
