Bridging Security Gaps in Multi-Cloud Systems: Insights from Developer Practices

As organizations increasingly adopt the use of multi-cloud infrastructure, they encounter challenges in ensuring consistent security across different platforms. Developers and software engineers working in multi-cloud environments face challenges such as tool fragmentation, compliance visibility, and integration across different cloud services or servers. This study discovered the strategies created by developers to secure multi-cloud systems, by analyzing insights from interviews with ten experienced professionals. Five findings were derived from the analysis application security, monitoring and compliance, threat detection, risk governance, and microservice infrastructure security. The findings of the study also point out how relevant shift-left security, zero-trust architecture, and AI-driven threat detection address the challenges encountered by developers. This study provides improved understanding about developer-led strategies which help bridge security gaps within multi-cloud environments and offers better guidance to improve cross-platform security.