Maintaining regulatory compliance in cloud-native infrastructures presents a persistent challenge for government and regulated organizations due to the dynamic, distributed, and rapidly evolving nature of modern digital environments. Traditional compliance models, which rely on periodic audits and manual verification, are often insufficient for ensuring continuous adherence to regulatory frameworks. This study proposes a cloud-native compliance architecture that integrates policy definition, infrastructure monitoring, automated compliance evaluation, and audit evidence generation within a unified operational lifecycle. The architecture transforms regulatory requirements into machine-readable policies, continuously validates infrastructure configurations against these policies, detects configuration drift in real time, and automatically generates verifiable audit artifacts. Evaluation through comparative and scenario-based analyses indicates that the proposed approach improves compliance enforcement, reduces operational overhead, and enhances audit readiness compared with conventional models. The findings suggest that the architecture provides a scalable, resilient, and auditable framework for dynamic regulated environments, enabling organizations to achieve continuous regulatory alignment while maintaining operational efficiency.
@artical{e11122022ijcatr11121038,
Title = "Re-Architecting Digital Infrastructure Security: Cloud-Native Compliance Models for High-Risk Government and Regulated Environments",
Journal ="International Journal of Computer Applications Technology and Research (IJCATR)",
Volume = "11",
Issue ="12",
Pages ="799 - 817",
Year = "2022",
Authors ="Ewela Lucky Inakpenu, Vincent Onaji"}