Service-oriented architecture (SOA) is known to be characterized by its openness, its agility and its composability. Such architecture includes autonomous, interoperable and potentially reusable services, which are implemented as Web Services (WS). When deployed in the Cloud Environment, security threats may increase at the WS level, raising some security challenges, such as vulnerability discovery and trust or availability violation. Addressing security issues require complex tasks that should be treated separately with associated concerns. To deal with this problem, we refer here to an alternative architecture known as Micro-Services Architecture (MSA) which is based on the principle of decomposing large and complex software projects into many atomic sub-projects. In Addition, to control, manager and ensure that vulnerabilities are appropriately treated and the expected security objectives are achieved, we find that the governance of Web Service security is inevitably required. Hence, we suggest here a Web Service security governance approach aims to reduce the security flaws and to enhance trust between web services. This approach consists in combining micro-services by using a sub-set of GDPR (EU General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC and was designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organizations across the region approach data privacy.) rules and a set of defined security policies. This approach allows guessing the dedicated micro-service referring to user security requirements.

Cloud applications are increasingly available, and the cloud must provide a multitude of services to cover the requirements of diverse users. Likewise, the number of web services has increased, and users may find themselves lost in the array of complex services. Consequently, it has become difficult for users to find the best services to meet their needs. In this context, cloud service discovery is an important challenge that has received increasing attention. In the cloud environment, services are openly accessible, which can lead to potential risks. Security in cloud services thus is necessary and can be identified through many attributes. In this study, we examine privacy attributes, which at present are the most bargain property in the cloud environment, and present a few mechanisms, including access control. With a specific goal to encourage cloud investigation by the user, we propose a refined cloud services discovery tool based on a user model that includes privacy-preserving access control. This user model is a combination of user context and security context and is designed with the aim of disentangling the demonstrating task.

In a Web services (WS) composition process, identifying the relevant sequence of services that meets the end user requirements remains an important issue. WS semantic enrichment process helps in solving this issue to cope with data heterogeneity, and facilitate their discovery and integration. This process should support personalization that takes into account user context. Currently, this personalization is not sufficient. In fact, it needs to be extended until the realization step. Besides, it requires many human interventions. The main characteristics of services based architecture, which are deployment and distribution, may open important security flaws. Personalization should then include protection against threats that could be encountered. WS composition must be made in a careful way, and security integration is neccesary.Starting from the beginning of runtime phase of a composition process, this paper suggests an on-the-fly approach which aims to: 1) Personalize the scheduling of all linked semantic Web services (SWS) according to their relevance degree based on user context ontology. 2) Try to improve the security level of each SWS and their composition according to usage and based on a security ontology and security patterns.