{
  "node_id": "nist-devsecops-microservices-service-mesh",
  "title": "Implementation of DevSecOps for a Microservices-based Application with Service Mesh",
  "domain": "Cloud & SaaS",
  "version": "1.0.0",
  "last_updated": "2022-03-01",
  "bluf": "Cloud-native applications have evolved into a standardized architecture consisting of multiple loosely coupled components called microservices, often implemented as containers, supported by an infrastructure for providing application services, such as service mesh. Due to security, business competitiveness, and the inherent structure of loosely coupled components, this class of applications needs a different development, deployment, and runtime paradigm. DevSecOps (Development, Security, and Operations) has been found to be a facilitating paradigm for these applications with primitives such as continuous integration, continuous delivery, and continuous deployment (CI/CD) pipelines. These pipelines are workflows for taking the developer’s source code through various stages, such as building, testing, packaging, deployment, and operations supported by automated tools with feedback mechanisms.\nFor the purpose of this document, the entire set of source code involved in the application environment is classified into five code types: application code, application services code, infrastructure as code, policy as code, and observability as code. Separate CI/CD pipelines can be created for all five code types. The objective of this document is to provide guidance for the implementation of DevSecOps primitives for a reference platform, which consists of a container orchestration and resource management platform (e.g., Kubernetes). The benefits of this implementation for high security assurance and for enabling continuous authority to operate (C-ATO) are also discussed.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-sp-800-190-container-security"
  ],
  "primary_citations_count": 7
}