Cloud 101CircleEventsBlog
Take the Understanding Data Risk Survey to help shape the future of data security!

Download Publication

Microservices Architecture Pattern
Microservices Architecture Pattern
Who it's for:
  • Application developers and architects
  • System and security administrators
  • Security program managers
  • Information system security officers

Microservices Architecture Pattern

Release Date: 08/31/2021

This document provides a repeatable approach to architecting, developing, and deploying microservices as Microservices Architecture Patterns (MAPs). The proposed MAP contains all the information necessary for a microservice to operate independently and communicate with other microservices which, in aggregate, become the components of an application.

This vendor-neutral reference architecture decomposes into software architecture patterns represented in software and platform (enterprise) planes, and then can be built back up with the addition of security control overlays. This can be demonstrated by the successful decomposition and recomposition of microservice architecture patterns where the integral action is the overlay of security controls. 

Key Takeaways:
  • The difference between architectures and solutions
  • What Microservices Architecture Patterns (MAPs) are
  • The components of several MAPs: offload, route, aggregation, cache, proxy, authN, authZ, facade, strangler fig, circuit breaker, and adapter patterns
  • What security control overlays are
  • The components of several overlays: service, IAM, network, monitoring, cryptologic, and microservice availability and resiliency overlays
 
This publication is part of a larger series, you can find all the papers in the series here.  

Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Zero Trust Guidance for Critical Infrastructure
Zero Trust Guidance for Critical Infrastructure
Zero Trust Guiding Principles v1.1
Zero Trust Guiding Principles v1.1
Strengthening Research Integrity with High-Performance Computing (HPC) Security
Strengthening Research Integrity with High-Perf...
Zero Standing Privileges: The Essentials
Zero Standing Privileges: The Essentials
Published: 11/01/2024
How to Get your Cyber Essentials Certification: A Process Guide
How to Get your Cyber Essentials Certification: A Process Guide
Published: 10/31/2024
Top IAM Priorities for 2025: Addressing Multi-Cloud Identity Management Challenges
Top IAM Priorities for 2025: Addressing Multi-Cloud Identity Manage...
Published: 10/30/2024
The Hidden Power of Zero Trust Thinking
The Hidden Power of Zero Trust Thinking
Published: 10/30/2024

Acknowledgements

Craig Ellrod
Craig Ellrod
Cloud Security Solutions Architect

Craig Ellrod

Cloud Security Solutions Architect

I hack therefore I am

Read more

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional

Michael Roza

Risk, Audit, Control and Compliance Professional

Since 2012 Michael has contributed to over 100 CSA projects completed by CSA's Internet of Things, Zero Trust/Software-Defined Perimeter, Top Threats, Cloud Control Matrix, Containers/Microservices, DevSecOps, and other working groups. He has also served as co-chair of CSA's Enterprise Architecture, Top Threats, and Security-as-a-Service working groups while also serving as the Standards Liaison Officer for IoT, ICS, EA, SECaaS, and Cloud K...

Read more

Anil Karmel
Anil Karmel
CEO, C2 Labs

Anil Karmel

CEO, C2 Labs

Anil Karmel is the Co-Founder and CEO of RegScale, which helps organizations start and stay compliant via the world's first real-time GRC platform. Formerly, Anil served as the National Nuclear Security Administration's (NNSA) Deputy Chief Technology Officer. Karmel began his government career as a Technical Staff Member of Los Alamos National Laboratory (LANL) and was responsible for inventing their cloud and collaboration technologies Kar...

Read more

Andrew Wild
Andrew Wild

Andrew Wild

Vani Murthy
Vani Murthy
Sr. Information Security Compliance Advisor, Akamai Technologies

Vani Murthy

Sr. Information Security Compliance Advisor, Akamai Technologies

Vani has 20+ years of IT experience in the areas such as Security, Risk, Compliance, Cloud services (IaaS/PaaS/SaaS) architecture

Read more

Gustavo Arreaza Headshot Missing
Gustavo Arreaza

Gustavo Arreaza

Kevin Keane Headshot Missing
Kevin Keane

Kevin Keane

Alex Rebo Headshot Missing
Alex Rebo
Enterprise Security Architect

Alex Rebo

Enterprise Security Architect

20+ year of Information Security / Assurance, Risk Management in private and public sectors.

CEA, PMP, CISSP, CCSP, ITIL, AWS CSA-A

Read more

Namrata Kulkarni
Namrata Kulkarni
Cyber Security Architect

Namrata Kulkarni

Cyber Security Architect

John Jiang Headshot Missing
John Jiang

John Jiang

Mark Yanalitis Headshot Missing
Mark Yanalitis

Mark Yanalitis

Ankit Sharma
Ankit Sharma
Security Officer, Compute BU at Cisco Systems

Ankit Sharma

Security Officer, Compute BU at Cisco Systems

Marina Bregkou
Marina Bregkou
Senior Research Analyst, CSA EMEA

Marina Bregkou

Senior Research Analyst, CSA EMEA

Ankur Gargi Headshot Missing
Ankur Gargi

Ankur Gargi

Sean Estrada
Sean Estrada
Head of Industry Standards Engagement for AWS

Sean Estrada

Head of Industry Standards Engagement for AWS

Sean Estrada is Head of Industry Standards Engagement for AWS, where he is responsible for driving engagement with industry standards organizations and alliances. Building on over 15 years of experience in information security, audit and compliance, Sean is Amazon's internal subject matter expert on security standards design, strategy and implementation, and is Amazon's representative to the PCI Board of Advisors and the Vice President of t...

Read more

Pradeep Nambiar Headshot Missing
Pradeep Nambiar

Pradeep Nambiar

Vinod Babu Vanjarapu Headshot Missing
Vinod Babu Vanjarapu

Vinod Babu Vanjarapu

Hillary Baron
Hillary Baron
Senior Technical Director - Research, CSA

Hillary Baron

Senior Technical Director - Research, CSA

Michael Holden Headshot Missing
Michael Holden

Michael Holden

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training