Security and Pentesting of AWS Lambda

AWS Lambda is an amazing service that offers serverless functions and applications to users. Basically, you create a Lambda function with some code that you want to execute, then you create some sort of trigger, and whenever that trigger is fired, your Lambda function will execute. Users are only charged for the time it takes a Lambda function to run, which is a maximum of 15 minutes (but that can be manually lowered on a per-function basis). Lambda offers a variety of programming languages to use for your functions, and it has even gone as far as allowing you to set up your own runtime to use languages that it doesn't directly support yet. One thing that we should make clear before diving into all of this is what serverless is. Although serverless makes it sound like there are no servers involved, Lambda is basically just spinning up...