One should really consider DevSecOps when dealing with a large infrastructure involving dozens or hundreds of micro services. Security as Code by design should be implemented as soon as possible. In my current gig - the following 3 points are key:

- 24x7 Proactive Security Monitoring

- Shared Threat Intelligence

- Compliance Operations

I would really advise anyone interested in this subject to check out DevSecOps manifesto [1].

Also - if you are running a k8s cluster for all your micro-services, there are several guides online as to best practices (see [2] for example).

----------

[1] https://www.devsecops.org/

[2] https://dev.to/petermbenjamin/kubernetes-security-best-pract...