Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-204

Security Strategies for Microservices-based Application Systems

Date Published: August 2019


Ramaswamy Chandramouli (NIST)



microservices; load balancing; circuit breaker; Application Programming Interface (API); API gateway; service mesh; proxy
Control Families

Access Control; Configuration Management; Identification and Authentication; System and Communications Protection; System and Information Integrity


Download URL

Supplemental Material:
None available

Publication Parts:
SP 800-204A
SP 800-204B
SP 800-204C
SP 800-204D

Document History:
03/25/19: SP 800-204 (Draft)
08/07/19: SP 800-204 (Final)