Security in the Serverless Environment
summary
Describes concrete serverless plumbing: SFTP → staging bucket → destination bucket → Amazon Event Bridge → Lambda → DynamoDB, with encryption at rest and in transit and IAM-backed key access. Recommends event validation at each handoff, strict access control and secret managers plus auto rotation instead of hardcoding. Names scanners and tools by uploader: Son sonar cloud, Cod scan, sneak, Zap and burb Suites. Emphasizes shifting security left, scanning third‑party libraries, and monitoring runtime logs for visibility.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:50What is serverless computing
- 3:36From traditional to serverless hosting
- 6:47Serverless architecture components
- 10:33Events in serverless environments
- 11:36Core serverless security
- 17:41Security scenario walkthrough
- 22:04Serverless security best practices
- 24:30Q&A
related talks
33mServerless Security: New Risks Require New Approaches
40mServerless Architecture Security Patterns for Securing the Unseen
50mAutomated Serverless Security Testing: Delivering secure apps continuously
24mServerless security: how to protect what you don't see?
30mServerless Security Top 10
42mBlowing Up Serverless Security with IAM (And How to Avoid It)
14mDeveloping and deploying secure AWS Lambda applications
27mBuilding & Running a Serverless Platform: Beyond Infrastructure