---
tags:
  - 20x
  - Cloud Service Providers
  - Key Security Indicators
---

<span class="picto">:lucide-computer:{ .machine title="This content is machine-generated from FedRAMP Machine-Readable Rules." }</span>

# Cloud Native Architecture






### Defining Functionality and Privileges

??? abstract "KSI-CNA-DFP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The functionality and privileges for infrastructure and services are strictly defined.



    **Related SP 800-53 Controls:** [CM-02](../../../reference/controls/configuration-management.md#cm-02){ data-preview }, [SI-03](../../../reference/controls/system-and-information-integrity.md#si-03){ data-preview }

### Enforcing Intended State

??? abstract "KSI-CNA-EIS"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    === "Class B"
        **Optional:** Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.

    === "Class C"
        Automated services are used to persistently assess the security of all machine-based information resources and automatically enforce their intended operational state.



    **Related SP 800-53 Controls:** [CA-02 (01)](../../../reference/controls/assessment-authorization-and-monitoring.md#ca-02-01){ data-preview }, [CA-07 (01)](../../../reference/controls/assessment-authorization-and-monitoring.md#ca-07-01){ data-preview }

    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
### Implementing Best Practices

??? abstract "KSI-CNA-IBP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The use and configuration of third-party machine-based information resources is persistently compared against the original provider's best practices and guidance.



    **Related SP 800-53 Controls:** [AC-17 (03)](../../../reference/controls/access-control.md#ac-17-03){ data-preview }, [CM-02](../../../reference/controls/configuration-management.md#cm-02){ data-preview }, [PL-10](../../../reference/controls/planning.md#pl-10){ data-preview }

    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
### Minimizing Attack Surface

??? abstract "KSI-CNA-MAT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they have a minimal attack surface and that lateral movement is minimized if compromised.



    **Related SP 800-53 Controls:** [AC-17 (03)](../../../reference/controls/access-control.md#ac-17-03){ data-preview }, [AC-18 (01)](../../../reference/controls/access-control.md#ac-18-01){ data-preview }, [AC-18 (03)](../../../reference/controls/access-control.md#ac-18-03){ data-preview }, [AC-20 (01)](../../../reference/controls/access-control.md#ac-20-01){ data-preview }, [CA-09](../../../reference/controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [SC-07 (03)](../../../reference/controls/system-and-communications-protection.md#sc-07-03){ data-preview }, [SC-07 (04)](../../../reference/controls/system-and-communications-protection.md#sc-07-04){ data-preview }, [SC-07 (05)](../../../reference/controls/system-and-communications-protection.md#sc-07-05){ data-preview }, [SC-07 (08)](../../../reference/controls/system-and-communications-protection.md#sc-07-08){ data-preview }, [SC-08](../../../reference/controls/system-and-communications-protection.md#sc-08){ data-preview }, [SC-10](../../../reference/controls/system-and-communications-protection.md#sc-10){ data-preview }, [SI-10](../../../reference/controls/system-and-information-integrity.md#si-10){ data-preview }, [SI-11](../../../reference/controls/system-and-information-integrity.md#si-11){ data-preview }, [SI-16](../../../reference/controls/system-and-information-integrity.md#si-16){ data-preview }

    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
### Optimizing for Availability

??? abstract "KSI-CNA-OFA"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they are appropriately optimized for high availability and rapid recovery.


    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
### Restricting Network Traffic

??? abstract "KSI-CNA-RNT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Machine-based information resources are persistently reviewed to ensure they are appropriately configured to limit inbound and outbound network traffic.



    **Related SP 800-53 Controls:** [AC-17 (03)](../../../reference/controls/access-control.md#ac-17-03){ data-preview }, [CA-09](../../../reference/controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [CM-07 (01)](../../../reference/controls/configuration-management.md#cm-07-01){ data-preview }, [SC-07 (05)](../../../reference/controls/system-and-communications-protection.md#sc-07-05){ data-preview }, [SI-08](../../../reference/controls/system-and-information-integrity.md#si-08){ data-preview }

    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
### Reviewing Protections

??? abstract "KSI-CNA-RVP"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of protection against denial of service attacks and other unwanted activity for machine-based information resources is persistently reviewed.



    **Related SP 800-53 Controls:** [SC-05](../../../reference/controls/system-and-communications-protection.md#sc-05){ data-preview }, [SI-08](../../../reference/controls/system-and-information-integrity.md#si-08){ data-preview }, [SI-08 (02)](../../../reference/controls/system-and-information-integrity.md#si-08-02){ data-preview }

    ---
    **Terms:** [Information Resource](../../../definitions/#information-resource){ data-preview }, [Machine-Based (Information Resources)](../../../definitions/#machine-based-information-resources){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }
### Using Logical Networking

??? abstract "KSI-CNA-ULN"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    Logical networking and related capabilities are used and persistently reviewed to enforce traffic flow controls.



    **Related SP 800-53 Controls:** [AC-12](../../../reference/controls/access-control.md#ac-12){ data-preview }, [AC-17 (03)](../../../reference/controls/access-control.md#ac-17-03){ data-preview }, [CA-09](../../../reference/controls/assessment-authorization-and-monitoring.md#ca-09){ data-preview }, [SC-04](../../../reference/controls/system-and-communications-protection.md#sc-04){ data-preview }, [SC-07](../../../reference/controls/system-and-communications-protection.md#sc-07){ data-preview }, [SC-07 (07)](../../../reference/controls/system-and-communications-protection.md#sc-07-07){ data-preview }, [SC-08](../../../reference/controls/system-and-communications-protection.md#sc-08){ data-preview }, [SC-10](../../../reference/controls/system-and-communications-protection.md#sc-10){ data-preview }

    ---
    **Terms:** [Persistently](../../../definitions/#persistently){ data-preview }
