NIST SP 800-204 MS Security

NIST SP 800-204 series microservices security.

Definition

SP 800-204 (August 2019) general microservices security. SP 800-204A (May 2020) Service Mesh Proxy-based (Istio, Linkerd). SP 800-204B (August 2021) Microservices authn/authz with OAuth 2.0 / OIDC. SP 800-204C (August 2022) Microservices DevSecOps. SP 800-204D (Oct 2023) Strategies for Distributed Application Programming Models.

Origin

NIST, Ramaswamy Chandramouli (NIST) principal author, series started 2019.

Usage

Reference for cloud-native security architects, Kubernetes platform engineers, service mesh adopters.

Related terms

• Service mesh — cas usage central.
• SPIFFE / SPIRE — workload identity.
• NIST SP 800-207 — cadre apparenté.