Cloud Native Development Patterns and Best Practices

Data layer

Many of the security requirements at the edge and in component layers are very mechanical and in many cases boilerplate. This is a definite benefit of leveraging value-added cloud services. This, in turn, frees teams to focus on the much more specialized security requirements of securing the data layer. Securing the data layer is more difficult because the requirements are domain specific and thus require input from domain experts. For example, we need domain knowledge to classify the sensitivity level of the different domain entities and their individual data elements. This is why security-by-design is so very important. The shared responsibility model in combination with value-added cloud services allows us to focus on the most ...