Serverless Transformation - Issue #32: Securing Serverless

Security is an integral part of developing any application, and Serverless applications are no different. In Manuel Benz’s two-part series, he shows you how you can secure Serverless applications from injection attacks.

In part one, it looks at SeverlessGoat, how to exploit its code injection vulnerability and how to fix the vulnerability. SeverlessGoat is a serverless application created by OWASP that demonstrates common serverless security flaws from the Serverless Security Top 10 Weaknesses guide.

When getting started with Serverless, you’re probably going to build something; developers learn by doing. That might mean building a side project or following a tutorial (like Serverless Stack). Either way that usually starts with creating an AWS account. Here Nicole Yip shows you how to follow best practices to secure your personal AWS accounts.

In the second instalment of his series on Application design, James Beswick looks at scaling and concurrency in Lambda and the different behaviours of on-demand and Provisioned Concurrency. He also dives into how reserved concurrency works and how to use it in your application design.

Related: James has also released part 3 of the series, so instead of including it in next week’s issue, you can read it here. This final instalment focuses on runtimes, networking and VPC configurations, as well as different invocation modes.

It’s always good to look at a real-world case study for Serverless. Here Mohamed Barakat goes over how and why he and his team created a Serverless URL shortener. 

Here is an excellent overview of Serverless for someone just getting started. Vaishali Bhatt goes over the basics of what Serverless is and then gives some examples of common use cases. It was also written with non-developers in mind, so it’s a great reference when trying to explain Serverless to people who aren’t developers.

We’re looking for Architects with experience building with Serverless on AWS. You will be responsible for contributing to your client projects, contributing to marketing and sales, improving our techniques and practices and pushing forward the state-of-the-art for Serverless.

We’re looking for Developers to join us in building with Serverless on AWS. You will be responsible for contributing to your client projects, and progressing your skills in Cloud Architecture.