Search for a command to run...
Series
We will discuss aspects serverless security, and describe what you can do to start securing your serverless application.
Visit https://ServerlessSecurityBook.com to level up and get the book.
Serverless has become a movement in application development because it allows developers to focus on code and leave infrastructure to the providers, e.g. Amazon Web Services (AWS). It is important to consider a secure architecture when using Serverle...
The term "serverless" implies having no server and might encourage the enthusiastic to think, "No more patching. No more vulnerability management." While there may be some truth in this, going serverless has its own set of security concerns and in th...
The term "serverless" implies having no server and might encourage the enthusiastic to think, "We can be less strict on security. The typical secure coding practices do not apply." The reality is no matter where you code is hosted, secure coding prac...
"Did I just delete the database with all my customer data?!" you might say if you failed to enable the measure to prevent accidental deletion. We will explore how to avoid this pitfall in your Serverless environment. Serverless Make It Really Easy to...
The Serverless Framework support numerous plugins—and they are great! They save so much time in deploying our serverless applications. Why reinvent the wheel? This convenience comes with a downside: not all plugins are written securely. We must choos...
There are some wonderful free or open-source tools you can use to improve the security of your serverless projects. We will explore these tools in five areas. 1. Linters Linters help improve your code by finding common coding flaws. You would typical...
