Microsegmentation

Microsegmentation divides cloud and data center networks into small, isolated segments and enforces granular access controls between them at the workload level rather than the network perimeter level. In cloud environments, microsegmentation is implemented through Kubernetes NetworkPolicies, security group rules, and service mesh authorization policies that restrict which services can communicate with which.

It limits lateral movement by ensuring a compromised workload cannot access unrelated services.