Cloud 101CircleEventsBlog
CSA's Continuous Audit Metrics Working Group is expanding! Help shape the future of cloud assurance.

Download Publication

Microservices Architecture Pattern
Microservices Architecture Pattern
Who it's for:
application developers 
application architects 
system and security administrators 

Microservices Architecture Pattern

Release Date: 08/31/2021

This document serves to propose a repeatable approach to architecting, developing and deploying Microservices as a “MAP” (Microservices Architecture Pattern). The proposed MAP contains all the information necessary for a microservice to operate independently and communicate with other microservices which, in aggregate, become capabilities which, in turn, become the components of an application. This paper describes the key elements of the MAP, how they should be designed and deployed, shifting security & compliance left via a continuous compliance-as-code approach. 


The primary goal of this work effort is to develop a vendor neutral reference architecture foundation that decomposes into software architecture patterns represented in Software and Platform (Enterprise) Planes, and then can be built back up with the addition of security control overlays. This can be demonstrated by the successful decomposition and recomposition of microservice architecture patterns where the integral action is the overlay of security controls.

This publication is part of a larger series, you can find all the papers in the series here.  

Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
The Six Pillars of DevSecOps - Collaboration and Integration
The Six Pillars of DevSecOps - Collaboration an...
The State of Security Remediation 2024
The State of Security Remediation 2024
Key Management Lifecycle Best Practices
Key Management Lifecycle Best Practices
To Meet Bold Ambitions and Combat Mounting Threats, Australia Endorses Zero Trust
To Meet Bold Ambitions and Combat Mounting Threats, Australia Endor...
Published: 02/28/2024
The Hidden Certificates in Your Organization: How to Find Them
The Hidden Certificates in Your Organization: How to Find Them
Published: 02/26/2024
3 Critical Steps for Application Security Teams in 2024
3 Critical Steps for Application Security Teams in 2024
Published: 02/23/2024
Zero Trust Messaging Needs a Reboot
Zero Trust Messaging Needs a Reboot
Published: 02/16/2024

Acknowledgements

Anil Karmel
Anil Karmel
Co-founder and CEO, RegScale

Anil Karmel

Co-founder and CEO, RegScale

Anil Karmel is the Co-Founder and CEO of RegScale, which helps organizations start and stay compliant via the world's first real-time GRC platform. Formerly, Anil served as the National Nuclear Security Administration's (NNSA) Deputy Chief Technology Officer. Karmel began his government career as a Technical Staff Member of Los Alamos National Laboratory (LANL) and was responsible for inventing their cloud and collaboration technologies Kar...

Read more

Andrew Wild
Andrew Wild

Andrew Wild

This person does not have a biography listed with CSA.

Vani Murthy
Vani Murthy
Sr. Information Security Compliance Advisor, Akamai Technologies

Vani Murthy

Sr. Information Security Compliance Advisor, Akamai Technologies

Vani has 20+ years of IT experience in the areas such as Security, Risk, Compliance, Cloud services (IaaS/PaaS/SaaS) architecture

Read more

Michael Roza
Michael Roza
Head of Risk, Audit, Control and Compliance

Michael Roza

Head of Risk, Audit, Control and Compliance

Since 2012 Michael has contributed to over 100 CSA projects completed by CSA's Internet of Things, Zero Trust/Software-Defined Perimeter, Top Threats, Cloud Control Matrix, Containers/Microservices, DevSecOps, and other working groups. He has also served as co-chair of CSA's Enterprise Architecture, Top Threats, and Security-as-a-Service working groups while also serving as the Standards Liaison Officer for IoT, ICS, EA, SECaaS, and Cloud K...

Read more

Craig Ellrod
Craig Ellrod
Cloud Security Solutions Architect

Craig Ellrod

Cloud Security Solutions Architect

I hack therefore I am

Read more

Kevin Keane Headshot Missing
Kevin Keane

Kevin Keane

This person does not have a biography listed with CSA.

Alex Rebo Headshot Missing
Alex Rebo

Alex Rebo

This person does not have a biography listed with CSA.

Namrata Kulkarni
Namrata Kulkarni
Cyber Security Architect

Namrata Kulkarni

Cyber Security Architect

This person does not have a biography listed with CSA.

Craig Ellrod
Craig Ellrod
Cloud Security Solutions Architect

Craig Ellrod

Cloud Security Solutions Architect

I hack therefore I am

Read more

John Jiang Headshot Missing
John Jiang

John Jiang

This person does not have a biography listed with CSA.

Mark Yanalitis Headshot Missing
Mark Yanalitis

Mark Yanalitis

This person does not have a biography listed with CSA.

Ankit Sharma
Ankit Sharma
Engineering Technical Leader at Cisco Systems India Pvt Ltd

Ankit Sharma

Engineering Technical Leader at Cisco Systems India Pvt Ltd

This person does not have a biography listed with CSA.

Marina Bregkou
Marina Bregkou
Senior Research Analyst, CSA EMEA

Marina Bregkou

Senior Research Analyst, CSA EMEA

This person does not have a biography listed with CSA.

Ankur Gargi Headshot Missing
Ankur Gargi

Ankur Gargi

This person does not have a biography listed with CSA.

Sean Estrada
Sean Estrada
Head of Industry Standards Engagement for AWS

Sean Estrada

Head of Industry Standards Engagement for AWS

Sean Estrada is Head of Industry Standards Engagement for AWS, where he is responsible for driving engagement with industry standards organizations and alliances. Building on over 15 years of experience in information security, audit and compliance, Sean is Amazon's internal subject matter expert on security standards design, strategy and implementation, and is Amazon's representative to the PCI Board of Advisors and the Vice President of t...

Read more

Pradeep Nambiar Headshot Missing
Pradeep Nambiar

Pradeep Nambiar

This person does not have a biography listed with CSA.

Vinod Babu Vanjarapu Headshot Missing
Vinod Babu Vanjarapu

Vinod Babu Vanjarapu

This person does not have a biography listed with CSA.

Hillary Baron
Hillary Baron
Senior Technical Director - Research, CSA

Hillary Baron

Senior Technical Director - Research, CSA

This person does not have a biography listed with CSA.

Michael Holden Headshot Missing
Michael Holden

Michael Holden

This person does not have a biography listed with CSA.

Gustavo Arreaza Headshot Missing
Gustavo Arreaza

Gustavo Arreaza

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training