Download Publication

Home

Publications

How to Design a Secure Serverless Architecture

Who it's for:

Application Developers
Security Professionals
CISOs
System and Security
Administrators
Information System Security
Officers

How to Design a Secure Serverless Architecture

Release Date: 10/23/2023

Working Groups: Enterprise Architecture Serverless

As businesses work to bring technology value to market faster, serverless computing is gaining adoption with developers. Serverless platforms enable developers to develop and deploy faster, allowing an easy way to move to cloud-native services without managing infrastructures like container clusters or virtual machines. However, like any solution, serverless computing brings with it a variety of cyber risks.

This publication provides best practices and recommendations for securing serverless architectures. It offers an extensive overview of the different threats, focusing on the application owner risks that serverless platforms are exposed to and suggesting the appropriate security controls. This 2023 version provides an update to the original document published in 2021. The update includes new recommendations to secure workloads utilizing a serverless solution.

Key Takeaways:

What is serverless
The advantages and benefits of serverless architectures
What is the shared responsibility model for serverless
Secure serverless design considerations, controls, and best practices
Kubernetes security best practices
Compliance and governance best practices for serverless

Download this Resource

Bookmark

Related resources

Related Resources

Why Cloud-Forward Tech Teams Need to Abandon Traditional IAM and PAM

Published: 12/11/2023

Why CISOs Are Investing in AI-Native Cybersecurity

Published: 12/06/2023

The Top 3 SaaS Security Challenges

Published: 12/05/2023

Human Discretion is Great, Right? Not When it’s the Lifeblood of So...

Published: 12/04/2023

View all blogs

View all webinars

Acknowledgements

Aradhna Chetal

Senior Director Executive- Cloud Security

Aradhna Chetal

Senior Director Executive- Cloud Security

Aradhna serves as a Senior Director Executive- Cloud Security at TIAA, a financial services company. She is responsible for the cloud security vision, strategy, standards, security patterns for a multi-cloud hybrid enterprise and engineer security solutions, to support the vision. Aradhna has worked in various Cybersecurity leadership roles at JP Morgan Chase, Boeing Company, Microsoft & T-Mobile.

Aradhna is an active member in the cy...

Vishwas Manral

Founder at Precize Inc & Fellow at Cloud Security Alliance

Vishwas Manral

Founder at Precize Inc & Fellow at Cloud Security Alliance

Vishwas is the Founder at Precize Inc, a stealth Cloud and AI security startup. Vishwas is also the co-chair of CSA’s Serverless Working Group and the Chair of Cloud Security Alliance in Silicon Valley. He was the head of Cloud Native security and Chief Technologist at McAfee Enterprise + FireEye. Vishwas joined McAfee Enterprise when his com...

Vani Murthy

Sr. Information Security Compliance Advisor, Akamai Technologies

Vani Murthy

Sr. Information Security Compliance Advisor, Akamai Technologies

Vani has 20+ years of IT experience in the areas such as Security, Risk, Compliance, Cloud services (IaaS/PaaS/SaaS) architecture

Ricardo Ferreira

EMEA CISO

Ricardo Ferreira

EMEA CISO