Zero-trust cloud architectures improve upon on-premises network segmentation by not implicitly trusting any user. Moreover, the cloud introduces new constructs that help tighten control, such as identity management, granular rules for accessing a resource or enforcing information sharing between the application server and database. Agencies that are thinking about re-architecting for multicloud or moving to a DISA or FedRAMP model have a golden opportunity to incorporate solutions that support zero-trust to further strengthen their security posture beyond maintaining zero-trust and segmentation at the network level.