Actionable Defense-in-Depth Guide for Cloud Native Applications – Part 1 (practicalsecurity.substack.com)

Setting up external protections around our Web Applications or API Services may not be enough if we do not utilize native layers in our Public Cloud Providers