In the previous chapter, we continued our deep dive into the human factors of cloud-native. We discussed the need to maximize the observability of our cloud-native systems. We shifted some testing all the way into production, where we continuously monitor key performance indicators and focus on the mean time to recovery in an effort to increase our confidence in the stability of our cloud-native systems. We also discussed how observability enables continuous performance tuning and improvement.
In this chapter, we will continue to discuss the human factors of cloud-native. We leverage the shared responsibility model of cloud-native security and adopt the practice of security-by-design to implement secure systems. We cover the following topics:
- Shared responsibility model
- Security by design
- Accounts as code
- Defense in depth
- Encryption
- Disaster recovery
- Application security
- Regulatory compliance