Abstract: Driven by the development of cloud computing, there are more and more assets on the cloud. It is difficult for cloudnative assert risk management products to manage them effectively and securely. At the same time, the cloud security operators cannot manage the asset security of all tenants on the cloud effectively and uniformly. Combining the actual business scenarios of customers, we provide the solution of multitenant asset risk management for cloud platform through the XRay product. From the perspective of cloudnative, we deeply integrate the XRay with cloud business platform, so that it has the characteristics of cloudnative automation, lightweight, high availability, elasticity and scalability. Security operators can manage cloud asset risks in a unified manner. And in the meanwhile it meets the risk selfcheck requirements of cloud platform tenants and guarantees business continuity.

Key words: cloud native, multi-tenant, automation, lightweight, high availability, manage effectively and uniformly, X-Ray

摘要： 在云计算发展推动下，云上资产越来越多，云原生的资产风险管理产品很难对其进行有效安全管理，云端安全运营人员无法对云上所有租户的资产安全性进行高效统一管控.结合客户实际业务场景，通过洞鉴(XRay)产品给出了云平台多租户资产风险管理解决方案，从云原生的视角将洞鉴(XRay)与云端业务平台深度融合，使其具备云原生自动化、轻量级、高可用、弹性可扩展等特性.该方案实现安全运营人员对云端资产风险统一管理的同时，还能满足云平台租户侧风险自查的需求，并且保障业务的连续性.

关键词: 云原生, 多租户, 自动化, 轻量级, 高可用, 统一管控, 洞鉴