Securing serverless implementations
Let’s get started!
Problem
Determining what the patterns for securing serverless deployments or cloud functions should be.
Context
Serverless, as shown in the following diagram, is the latest among the computing type options. It is also called Function as a Service (FaaS). Amazon Web Services (AWS) Lambda, Azure Functions, IBM, and Google Cloud Functions are popular examples of serverless computing models. In this model, an application is broken into separate functions that run when triggered by some action. The consumer is charged only for the processing time used by each function as it executes:
Figure 5.11 – Serverless or cloud functions
A major challenge with securing serverless functions is that they are short-lived or ephemeral. So, it can be challenging to monitor and detect malicious activity in serverless functions. Serverless functions rely on underlying components and other cloud services...