serverless-security
Safeguard articles tagged "serverless-security" — guides, analysis, and best practices for software supply chain and application security.
9 articles
Serverless Security Best Practices: Securing the Function Lifecycle
A lifecycle approach to serverless security across AWS Lambda, Azure Functions, and Cloud Functions — covering the build, deploy, invoke, and runtime phases with IAM, dependency, and event-injection controls.
Securing serverless containers on Fargate and Cloud Run
No SSH, no DaemonSets, no host agents. Here's how Firecracker and gVisor isolation change container security on Fargate and Cloud Run — and what still gets you breached.
Securing AWS Lambda functions
A practical guide to AWS Lambda security best practices: IAM scoping, dependency risk, secrets handling, and runtime detection for serverless apps.
Serverless security implications from infra to OWASP
Serverless shrinks the OS attack surface but expands the IAM and dependency one. Here's how the OWASP Serverless Top 10 maps to real 2021-era incidents.
10 serverless security best practices
10 concrete, numbers-backed serverless security practices covering IAM least privilege, dependency SBOMs, event injection, and secrets management.
Securing AWS Lambda cold starts and execution permissions
Lambda cold starts inject live IAM credentials into shared execution environments — here's how over-permissioned roles and vulnerable layers turn that into a real attack surface.
What is Serverless Security
Serverless security protects function code, IAM roles, and event triggers where traditional host-based scanning and patching don't apply.
Security considerations for running WebAssembly at the ed...
Wasm's sandbox is safe by default, not safe by construction. Here's where edge WebAssembly security breaks down -- in browsers, at the edge, and in the build pipeline.
AWS Lambda Supply Chain Risks You Are Probably Ignoring
Serverless does not mean secure. Here are the supply chain risks hiding in your Lambda functions and how to address them.