Back to glossary

Cloud-Native Security

A security approach designed specifically for the dynamic, distributed, and scalable nature of cloud-native applications.

Categorycloud

Overview

Traditional security models based on a 'hard perimeter' (firewalls) are insufficient for the cloud. Cloud-native security focuses on protecting workloads, containers, and APIs using automated, identity-based controls.

The 4Cs of Cloud-Native Security

  1. Cloud: Security of the underlying infrastructure (Shared Responsibility Model).
  2. Cluster: Security of the orchestration layer (e.g., Kubernetes).
  3. Container: Security of the container images and runtime.
  4. Code: Security of the application code (e.g., scanning for vulnerabilities and hardcoded secrets).

Key Principles

  • Zero Trust: Never trust, always verify every request.
  • Automation: Integrating security checks into the CI/CD pipeline.
  • Observability: Continuous monitoring and logging of all activities.

Related Terms

Shared Responsibility Model