ConceptsCloud-Native Attack Patterns

Cloud-Native Attack Patterns

The recurring ways attackers compromise cloud-native systems, such as exploiting exposed orchestrator APIs, escaping containers, abusing over-permissioned workload identities, and cryptojacking. They differ from traditional attacks because the architecture differs.

Glossary definition

12 direct links1 lesson

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Cloud-Native Architecture

A related concept to explore, covered by 7 lessons.

Open concept →

Builds towardCloud-Native Attack Patterns is a foundation for these

Cloud-Native Incident Patterns

The characteristic shapes that incidents take in cloud-native environments, such as an exposed orchestrator leading to mass workload compromise, or a container escape spreading across a node, that inform how responders investigate and contain them.

lesson

Relatedsorted by lesson coverage

Cloud-Native ArchitectureStart here

lessons

Cloud-Native Security Model

lessons

Cloud VM Lifecycle

lessons

Cluster Hardening

lessons

Cloud-Native Observability

lesson

Cloud-Specific TTPs

lesson

Show 5 more connections

CloudFormation Bicep

lesson

Container Escape Patterns

lesson

Cryptojacking

lesson

Defense Evolution

lesson

Kubernetes-Specific Attacks

lesson

Related Lessons

1 lesson covers this concept

Cloud-Native ATT&CK Patterns and Case Studies

Cloud Security Engineer