ChaptersCircleEventsBlog

Download Publication

Microservices Architecture Pattern
Microservices Architecture Pattern
Who it's for:
  • Application developers and architects
  • System and security administrators
  • Security program managers
  • Information system security officers

Microservices Architecture Pattern

Release Date: 08/31/2021

This document provides a repeatable approach to architecting, developing, and deploying microservices as Microservices Architecture Patterns (MAPs). The proposed MAP contains all the information necessary for a microservice to operate independently and communicate with other microservices which, in aggregate, become the components of an application.

This vendor-neutral reference architecture decomposes into software architecture patterns represented in software and platform (enterprise) planes, and then can be built back up with the addition of security control overlays. This can be demonstrated by the successful decomposition and recomposition of microservice architecture patterns where the integral action is the overlay of security controls. 

Key Takeaways:
  • The difference between architectures and solutions
  • What Microservices Architecture Patterns (MAPs) are
  • The components of several MAPs: offload, route, aggregation, cache, proxy, authN, authZ, facade, strangler fig, circuit breaker, and adapter patterns
  • What security control overlays are
  • The components of several overlays: service, IAM, network, monitoring, cryptologic, and microservice availability and resiliency overlays
 
This publication is part of a larger series, you can find all the papers in the series here.  

Download this Resource

Prefer to access this resource without an account? Download it now.

Bookmark
Share
Related resources
Zero Trust Privacy Assessment and Guidance - Japanese Translation
Zero Trust Privacy Assessment and Guidance - Ja...
CSA Code of Conduct to EU Cloud Code of Conduct Mapping
CSA Code of Conduct to EU Cloud Code of Conduct...
Cloud Key Management Working Group Charter 2025
Cloud Key Management Working Group Charter 2025
PCI DSS Future-Dated Controls: 7 Critical Changes that Will Shape Your Security Strategy
PCI DSS Future-Dated Controls: 7 Critical Changes that Will Shape Y...
Published: 04/04/2025
Why Security Questionnaires Are a Familiar—but Ineffective—Norm for Assessing Risk
Why Security Questionnaires Are a Familiar—but Ineffective—Norm for...
Published: 04/02/2025
Unifying Governance and Security with an Application Fabric
Unifying Governance and Security with an Application Fabric
Published: 03/31/2025
Don’t Buy A Network Pen Test Until You Ask These Questions
Don’t Buy A Network Pen Test Until You Ask These Questions
Published: 03/28/2025

Acknowledgements

Craig Ellrod
Craig Ellrod
Cloud Security Solutions Architect

Craig Ellrod

Cloud Security Solutions Architect

I hack therefore I am

Read more

Michael Roza
Michael Roza
Risk, Audit, Control and Compliance Professional at EVC

Michael Roza

Risk, Audit, Control and Compliance Professional at EVC

Since 2012, Michael Roza has been a pivotal member of the Cloud Security Alliance (CSA) family. He has contributed to over 125 projects, as a Lead Author or Author/Contributor and many more as a Reviewer/Editor.
Michael's extensive contributions encompass critical areas including Artificial Intelligence, Zero Trust/Software Defined Perimeter, Internet of Things, Top Threats, Cloud Control Matrix, DevSecOps, and Key Management. H...

Read more

Anil Karmel
Anil Karmel
CEO, C2 Labs

Anil Karmel

CEO, C2 Labs

Anil Karmel is the Co-Founder and CEO of RegScale, which helps organizations start and stay compliant via the world's first real-time GRC platform. Formerly, Anil served as the National Nuclear Security Administration's (NNSA) Deputy Chief Technology Officer. Karmel began his government career as a Technical Staff Member of Los Alamos National Laboratory (LANL) and was responsible for inventing their cloud and collaboration technologies Kar...

Read more

Andrew Wild
Andrew Wild

Andrew Wild

Vani Murthy
Vani Murthy
Sr. Information Security Compliance Advisor, Akamai Technologies

Vani Murthy

Sr. Information Security Compliance Advisor, Akamai Technologies

Vani has 20+ years of IT experience in the areas such as Security, Risk, Compliance, Cloud services (IaaS/PaaS/SaaS) architecture

Read more

Gustavo Arreaza Headshot Missing
Gustavo Arreaza

Gustavo Arreaza

Kevin Keane Headshot Missing
Kevin Keane

Kevin Keane

Alex Rebo Headshot Missing
Alex Rebo
Enterprise Security Architect

Alex Rebo

Enterprise Security Architect

20+ year of Information Security / Assurance, Risk Management in private and public sectors.

CEA, PMP, CISSP, CCSP, ITIL, AWS CSA-A

Read more

Namrata Kulkarni
Namrata Kulkarni
Cyber Security Architect

Namrata Kulkarni

Cyber Security Architect

John Jiang Headshot Missing
John Jiang

John Jiang

Mark Yanalitis Headshot Missing
Mark Yanalitis

Mark Yanalitis

Ankit Sharma
Ankit Sharma
Security Officer, Compute BU at Cisco Systems

Ankit Sharma

Security Officer, Compute BU at Cisco Systems

Marina Bregkou
Marina Bregkou
Principal Research Analyst, Associate VP

Marina Bregkou

Principal Research Analyst, Associate VP

Ankur Gargi Headshot Missing
Ankur Gargi

Ankur Gargi

Sean Estrada
Sean Estrada
Head of Industry Standards Engagement for AWS

Sean Estrada

Head of Industry Standards Engagement for AWS

Sean Estrada is Head of Industry Standards Engagement for AWS, where he is responsible for driving engagement with industry standards organizations and alliances. Building on over 15 years of experience in information security, audit and compliance, Sean is Amazon's internal subject matter expert on security standards design, strategy and implementation, and is Amazon's representative to the PCI Board of Advisors and the Vice President of t...

Read more

Pradeep Nambiar Headshot Missing
Pradeep Nambiar

Pradeep Nambiar

Vinod Babu Vanjarapu Headshot Missing
Vinod Babu Vanjarapu

Vinod Babu Vanjarapu

Hillary Baron
Hillary Baron
Senior Technical Director - Research, CSA

Hillary Baron

Senior Technical Director - Research, CSA

Michael Holden Headshot Missing
Michael Holden

Michael Holden

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?

Related Certificates & Training