Integration / Native / Connector Integration
NativeCloudIntegration Pattern

Integration Native Connectors (Cloud)

David TirabassiUpdated
Enterprise/Solution Architect · Almost 30 years' experience, specialising in integration · TOGAF 9.1 certifiedLinkedInGitHub

Problem

Two cloud applications, or a cloud application and a SaaS platform, need to exchange data, and both already ship an integration mechanism for it. If nobody agrees to use those built-in mechanisms, each team builds its own middleware for the exchange, and the organisation pays for it in cost, latency and upkeep.

Solution

Use the integration the platforms already provide: a certified connector, the vendor's event stream, or a direct API link. The exchange runs over a vendor-managed, authenticated channel, so there is no custom middleware to build, host or patch.

Cloud Paradigm

  • Native Application Integration
  • Managed Service Connectivity
  • SaaS-to-SaaS Integration
  • Vendor-Certified Connectors
  • API-First Design (where APIs are the native mechanism)
  • Event-Driven Architecture (for asynchronous patterns)

Solution Flow

Data Exchange Flow (Synchronous or Asynchronous):

  1. Source Application: An internal or external cloud-native application starts an exchange, synchronously (e.g., an API call) or asynchronously (e.g., publishing an event to a stream).
  2. Native Integration Component: The source's built-in component or connector serialises the data, connects to the target, handles protocol conversion and secures the transport.
  3. Secure Communication Channel: Data crosses a pre-established, vendor-managed, implicitly secured channel on the underlying cloud network. It often stays inside a trusted platform boundary or uses mutual authentication, so it may bypass traditional perimeter security layers.
  4. Target Application: The target's native integration component receives, authenticates and validates the data or event.
  5. Target Workload: The target processes the data, runs business logic, and stores it or triggers further actions. A response (synchronous) or acknowledgement (asynchronous) returns over the native channel.

When to Use

  • Both endpoints are cloud-native applications or SaaS platforms with certified, vendor-supported connectors for each other.
  • You need a managed exchange channel without building or maintaining custom middleware.
  • The platforms' native components directly support the integration style (API link, event stream).
  • You want to inherit the cloud platform's scalability, resilience and security posture instead of building your own.
  • Connection parameters and credentials can be managed as code and deployed through existing CI/CD pipelines.

When NOT to Use

  • Either endpoint is a legacy or on-premises system without native cloud connectors. Use a middleware or gateway pattern.
  • The exchange needs complex transformation, orchestration or routing beyond the native connector. Prefer an ESB or iPaaS pattern.
  • You must avoid vendor lock-in or keep full control of the transport and security layers.
  • No certified integration exists between the two platforms, which would force brittle custom adapters.
  • Regulation requires the exchange to pass through traditional perimeter security controls that native channels bypass.

Trade-offs

  • No custom middleware, faster delivery vs deep coupling to two vendors' roadmaps and pricing.
  • Built-in platform scalability and resilience vs little control when native failover or throttling behaviour doesn't fit your needs.
  • Certified, pre-built security and maintenance vs channels that may bypass your perimeter and audit tooling.
  • Simple configuration as code vs weaker transformation and orchestration than a dedicated integration platform.
  • Vendor observability out of the box vs fragmented monitoring across platforms with different telemetry models.

Illustrative Scenario

A hypothetical scenario showing how the pattern applies. Not a client case study.

Picture a hypothetical outdoor-gear retailer whose cloud-native inventory application has to stay in step with a certified SaaS e-commerce platform. When a store associate adjusts stock, the inventory service publishes a stock-level event to the e-commerce platform's native event stream connector. The connector serialises the payload and opens a mutually authenticated connection over the vendor-managed channel, inside the trusted platform boundary. In this scenario there is no custom middleware in between. The platform's native component receives, authenticates and validates the event, updates the product's available-to-sell count, and returns an acknowledgement over the same channel. Connection parameters and API credentials are kept as YAML in version control and deployed through the retailer's existing CI/CD pipeline. Both platforms' built-in logging and tracing show exchange latency and error rates. Because the integration runs on the platforms' own scaling, seasonal traffic spikes are absorbed without anyone having to step in and manage failover by hand.

Additional Details

  • Vendor Certification: Prefer integrations that both vendors officially support and certify, for compatibility, ongoing maintenance and a sound security posture.
  • Configuration as Code: Keep integration configuration, including connection parameters and security credentials, as code artefacts (e.g., YAML, JSON) in version control, deployed through automated CI/CD pipelines.
  • Observability: Use the platforms' own logging, monitoring and tracing to track exchange status, latency, error rates and access, and to troubleshoot.
  • Data Governance: Follow the organisation's data residency, classification and retention policies. Confirm sensitive data is handled correctly and encrypted at every stage.
  • Scalability & Resilience: Native integrations usually inherit the cloud platform's scalability and resilience. Confirm the configured integration points handle expected load and fail over without manual intervention.

Security Controls

  • Transport Security: Enforce Transport Layer Security (TLS 1.2 or higher) on all integration endpoints.
  • Authentication & Authorisation:
    • For system-to-system integrations, use OAuth 2.0 (Client Credentials Grant), Mutual TLS (mTLS) or Service Account-based authentication where the platform supports it natively.
    • Use API Keys for identification or rate limiting, not as the sole authentication mechanism.
    • Apply Role-Based Access Control (RBAC) so integration components run with least privilege.
  • Data Encryption: Encrypt sensitive data at rest in the integrated applications, meeting data residency and compliance requirements.
  • Auditing and Logging: Log all integration activity, including successful and failed exchanges, authentication attempts and authorisation decisions. Centralise logs for monitoring and compliance.
  • Vulnerability Management & Testing: Regularly assess, penetration-test and scan the integrated applications and connecting components, and remediate weaknesses.
  • Configuration Management: Treat integration configuration, including security settings, as immutable infrastructure managed through Infrastructure as Code (IaC).

Related Patterns