In this chapter, we discussed how the shared responsibility model of cloud security, when combined with value-added cloud services, enables teams to focus their energies on the security of their data. We leverage the practices of security-by-design and security-as-code to increase confidence in the security of cloud-native systems by eliminating the human factors of implementing defense-in-depth policies, such as least privilege and encryption, through automation. Nevertheless, we discussed safeguards to ensure continuity of service in the event that we need to recover from a disaster. In addition to overall system security, we discussed application level security topics, such as OAuth, OpenID Connect, and JWT. We also discussed how the increased quality, conformity, and traceability of cloud-native systems facilitate regulatory compliance.
In the next chapter, we discuss...
