Cloud Native Architecture

Defining Functionality and Privileges

Strictly define the functionality and privileges for infrastructure and services.

Enforcing Intended State

Implementing Best Practices

Persistently ensure cloud-native machine-based information resources are implemented based on the host provider's best practices and documented guidance.

Minimizing Attack Surface

Persistently ensure machine-based information resources have a minimal attack surface and that lateral movement is minimized if compromised.

Optimizing for Availability

Appropriately optimize machine-based information resources for high availability and rapid recovery.

Restricting Network Traffic

Persistently ensure all machine-based information resources are configured to limit inbound and outbound network traffic.

Reviewing Protections

Persistently review the effectiveness of protection against denial of service attacks and other unwanted activity.

Using Logical Networking

Use logical networking and related capabilities to enforce traffic flow controls.