ConceptsCloud-Native Incident Patterns

Cloud-Native Incident Patterns

The characteristic shapes that incidents take in cloud-native environments, such as an exposed orchestrator leading to mass workload compromise, or a container escape spreading across a node, that inform how responders investigate and contain them.

Glossary definition

12 direct links1 lesson

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Cloud-Native Attack Patterns

The foundation Cloud-Native Incident Patterns builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Cloud-Native Attack PatternsStart here

The recurring ways attackers compromise cloud-native systems, such as exploiting exposed orchestrator APIs, escaping containers, abusing over-permissioned workload identities, and cryptojacking. They differ from traditional attacks because the architecture differs.

lesson

Relatedsorted by lesson coverage

Cloud-Native Architecture

lessons

Cloud-Native Security Model

lessons

Cloud VM Lifecycle

lessons

Cluster Hardening

lessons

Cloud-Native Observability

lesson

Cloud-Specific TTPs

lesson

Show 5 more connections

CloudFormation Bicep

lesson

Container Escape Patterns

lesson

Cryptojacking

lesson

Distributed Tracing for Security

lesson

Kubernetes-Specific Attacks

lesson

Related Lessons

1 lesson covers this concept

Cloud-Native ATT&CK Patterns and Case Studies

Cloud Security Engineer