Abstract Service-oriented architecture (SOA) is known to be characterized by its openness, its agility and its composability. Such architecture includes autonomous, interoperable and potentially reusable services, which are implemented as Web Services (WS). When deployed in the Cloud Environment, security threats may increase at the WS level, raising some security challenges, such as vulnerability discovery and trust or availability violation. Addressing security issues require complex tasks that should be treated separately with associated concerns. To deal with this problem, we refer here to an alternative architecture known as Micro-Services Architecture (MSA) which is based on the principle of decomposing large and complex software projects into many atomic sub-projects. In Addition, to control, manager and ensure that vulnerabilities are appropriately treated and the expected security objectives are achieved, we find that the governance of Web Service security is inevitably required. Hence, we suggest here a Web Service security governance approach aims to reduce the security flaws and to enhance trust between web services. This approach consists in combining micro-services by using a sub-set of GDPR(EU General Data Protection Regulation (GDPR) replaces the Data Protection Directive 95/46/EC and was designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organizations across the region approach data privacy.) rules and a set of defined security policies. This approach allows guessing the dedicated micro-service referring to user security requirements.