Member-only story
Four Zones of Trust in Cloud Native Enterprise Architecture
A currently common trend in Enterprise Architecture for large and small companies alike is moving away from monolithic applications and move into smaller subsystems. Smaller subsystems, common build and interconnected as a set of custom build microservices, Software as a Service, jointly forming the enterprise IT footprint providing services to the business.
Where a lot of best practices have been established over the years on how to protect monolithic applications by implementing firewalls, splitting tiers and other best practices we see a lot of enterprises struggle with finding the right way of implementing good security measures in a more cloud naive enterprise architecture.
Define your target cloud native footprint
Before you can start developing a baseline cloud native security model you first have to ensure you have a basic view of your target cloud native footprint. This has to include both services that fall within the Enterprise Control Boundary and systems that fall outside of that.
A way to support building the future state vision of a more cloud native and future state IT footprint is using Domain Driven Design in combination with Capabilities Mapping. This helps to identify business capabilities, sometimes locked down in big monolithic applications, and…