Cloud-Native Resilience: DevOps and DORA in Financial Services

Abstract: This paper examines how cloud-native architectures and DevOps practices are reshaping operational resilience in the financial sector under increasingly demanding regulatory expectations. It analyzes DORA as a framework that links technological performance to systemic risk management and business continuity, positioning reliability as a regulated outcome. The study explores how automation, full-stack observability and declarative infrastructure can operationalize compliance through meaningful metrics, integrated security and standardized incident response. It also identifies risks associated with distributed complexity, third-party dependency and vendor lock in that require robust governance of data, configurations and change processes. The paper concludes that cloud-native resilience depends on institutional learning, shared accountability with service providers and continuous technical auditing to sustain compliance, stability and trust in critical digital services. Note: Version updated in repository for preservation and digital accessibility. Original intellectual content remains unchanged. Generative AI tools were used solely for translation and linguistic refinement. No AI tools were involved in the conception or substantive development. The final text was reviewed and approved by the author. Official reference version:Zenodo DOI: https://doi.org/10.5281/zenodo.17423551Parallel version available:SSRN: https://ssrn.com/abstract=5497878 - DOI: https://doi.org/10.2139/ssrn.5497878Preservation copy at the Internet Archive: https://archive.org/details/zenodo.17423551