# NIST SP 800-207A ZTA for Cloud-Native Applications

**Canonical:** https://apis.io/apis/zero-trust-architecture/nist-sp-800-207a/  
**Provider:** Zero Trust Architecture — https://apis.io/providers/zero-trust-architecture/  
**Documentation:** https://csrc.nist.gov/pubs/sp/800/207/a/final

NIST SP 800-207A ZTA for Cloud-Native Applications is one of 5 APIs that [Zero Trust Architecture](https://apis.io/providers/zero-trust-architecture/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Cloud Security, Kubernetes, NIST, and Zero Trust. The published artifact set on APIs.io includes API documentation.

NIST SP 800-207A extends the original ZTA guidance to cover cloud-native applications in multi-cloud environments. It addresses service mesh architectures, workload identity, microsegmentation, and API-centric access control patterns for containerized workloads.

## Machine-readable artifacts (2)

- **Documentation** — https://csrc.nist.gov/pubs/sp/800/207/a/final
- **Documentation** — https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207A.pdf

## Other Zero Trust Architecture APIs (4)

- [NIST SP 800-207 Zero Trust Architecture](https://apis.io/apis/zero-trust-architecture/nist-sp-800-207/)
- [SPIFFE - Secure Production Identity Framework for Everyone](https://apis.io/apis/zero-trust-architecture/spiffe/)
- [SPIRE - SPIFFE Runtime Environment](https://apis.io/apis/zero-trust-architecture/spire/)
- [Open Policy Agent (OPA)](https://apis.io/apis/zero-trust-architecture/open-policy-agent/)

## Tags

Cloud Security, Kubernetes, NIST, Zero Trust

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/zero-trust-architecture/nist-sp-800-207a/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/zero-trust-architecture/.