# Security in Cloud-Native Services: A Survey
## 3 Key Features for Security in Cloud-Native Services  
In order to mitigate the aforementioned cybersecurity challenges, parties utilizing cloud-native services should incorporate the following features that shall be explored in this section. After carefully examining the corresponding scientific literature, the authors of this work were able to construct Table 2 that illustrates how these features correspond to the aforementioned key aspects for security in cloud-native services. These features are the following:  
* **Strong Access Controls [67]:** Implementing strict access controls, including authentication, role-based access control, and least privilege principles helps prevent unauthorized access and reduces the impact of potential breaches. Strong access controls are crucial in cloud-native services to ensure the security, confidentiality, and integrity of data and resources. Access controls govern the authentication and authorization processes, determining who can access specific resources and what actions they can perform. Here are the key reasons why strong access controls are important in cloud-native services:
* **Network Segmentation [68]:** Network segmentation is a security practice that involves dividing a network into smaller, isolated segments to enhance the security and control of cloud-native services. Each segment, known as a network zone or subnet, contains a specific set of resources with defined access controls. Properly segmenting the cloud-native infrastructure into isolated networks and subnets can limit the lateral movement of attackers and contain the impact of potential breaches. * **Data Encryption [69]:** Ensuring that data are encrypted both at rest and in transit helps protect sensitive information from unauthorized access. Data encryption plays a vital role in ensuring the security and privacy of data in cloud-native services. As organizations increasingly adopt cloud computing and migrate their infrastructure and applications to the cloud, the need for robust data protection mechanisms becomes even more critical. \begin{table}
\begin{tabular}{c l} \hline \hline
**Key Aspects** & **Features** \\ \hline \multirow{3}{*}{Access Management} & Strong Access Controls \\  & Network Segmentation \\  & Secure Communication \\ \hline \multirow{3}{*}{Data Security} & Secure Communication \\  & Data Encryption \\  & Disaster Recovery, Incident Response, and Data Backup \\ \hline \multirow{3}{*}{Security Monitoring and Incident Response} & Disaster Recovery, Incident Response, and Data Backup \\  & Continuous Monitoring and Intrusion Detection \\  & Process Automation \\ \hline \multirow{3}{*}{Orchestration Platform Security} & Process Automation \\  & Vulnerability Management \\  & Configuration Management \\ \hline \multirow{3}{*}{Container and Microservice Security} & Process Automation \\  & Vulnerability Management \\ \cline{1-1}  & Configuration Management \\ \cline{1-1}  & Continuous Security Testing \\ \hline \multirow{3}{*}{DevSecOps Practices} & Vulnerability Management \\ \cline{1-1}  & Configuration Management \\ \cline{1-1}  & Continuous Security Management \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Mapping of key aspects to features. * **Secure Communication [70]:** Utilizing secure communication protocols, such as HTTPS, and regularly updating cryptographic libraries and certificates enhances the integrity of data transfers. Secure communication in cloud-native services involves implementing measures to protect data and ensure the confidentiality, integrity, and authenticity of information exchanged between components within the cloud-native environment. * **Continuous Monitoring [71] and Intrusion Detection [72]:** Employing robust monitoring and intrusion detection systems enables the early detection of potential threats, allowing for timely response and mitigation. This includes monitoring network traffic, analyzing log data, and leveraging threat intelligence to identify and respond to suspicious activities.