Cloud vendor neutral solution for Security Groups/Firewall rules etc.?

Question

When an application is deployed in cloud, it needs to set Security Groups/Firewall rules, an application can be written to deploy to any cloud vendor.

But how about SecurityGroups/Firewall rules? Application must use firewall rules, but usage leads to vendor locking.

Can there be any cloud neutral solution for Firewall rules?

Answer 1

SPIFFE specification exactly addresses this problem. But, this project seems to be in its inception stage https://spiffe.io/spiffe/