Nist SP 800-207A: A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments
doc
https://csrc.nist.gov/publications/detail/sp/800-207a/draft
核心是微服务架构所导致的云端内部业务数据流交互,在此基础上做机密,认证,授权策略的原子化。
区分网络隔离与应用隔离。