How to Design a Secure Serverless Architecture 2021
Released: 09/14/2021
This is an old version of the document. Check out the 2023 version here.
Like any solution, serverless computing brings with it a variety of cyber risks. This paper provides best practices and recommendations for securing serverless applications. It offers an extensive overview of the different threats, focusing on the application owner risks that serverless platforms are exposed to and suggesting the appropriate security controls.
Like any solution, serverless computing brings with it a variety of cyber risks. This paper provides best practices and recommendations for securing serverless applications. It offers an extensive overview of the different threats, focusing on the application owner risks that serverless platforms are exposed to and suggesting the appropriate security controls.
The document assumes that the readers have some knowledge of coding practices, security and networking expertise, and application containers, microservices, functions, and agile application development.
Key Takeaways:
- What is Serverless
- Advantages and benefits of serverless architecture
- Shared responsibility model for serverless
- Security design, controls and best practices
- Kubernetes security best practices
- CI-CD pipelines, Function Code, Code scans and policy enforcement for Functions and Containers
- Compliance and governance for serverless
Prefer to access this resource without an account? Download it now.
Best For:
- application developers
- security professionals
- CISOs
- system and security administrators
- information system security officers
