U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 800-204

Security Strategies for Microservices-based Application Systems

Date Published: August 2019


Ramaswamy Chandramouli (NIST)



microservices; load balancing; circuit breaker; Application Programming Interface (API); API gateway; service mesh; proxy
Control Families

Access Control; Configuration Management; Identification and Authentication; System and Communications Protection; System and Information Integrity


SP 800-204 (DOI)
Local Download

Supplemental Material:
None available

Other Parts of this Publication:
SP 800-204A
SP 800-204B
SP 800-204C

Document History:
03/25/19: SP 800-204 (Draft)
08/07/19: SP 800-204 (Final)