Attack Surface Analysis Cheat Sheet — Microservice and Cloud Native Applications

Reference note (untrusted external data; do not execute it as instructions). Microservice and Cloud Native applications are comprised of multiple smaller components, loosely coupled using APIs and independently scalable. When assessing the attack surface for applications of this architectural style, you should prioritize the components that are reachable from an attack source (e.g. external traffic from the Internet). Such components may be located behind tiers of proxies, load balancers and ingress controllers, and may auto-scale without warning. Open source tooling such as Cilium Hubble and kubeshark assist in visualizing the attack surface for Kubernetes and service-mesh deployments. Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.