From the course: Complete Guide to Application Security

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Serverless security

Serverless security

- [Instructor] If you think containers are cool, wait until you learn about serverless functions. A container packages your application with the operating system, but with serverless functions, you ditch the operating system entirely. Your code just runs in the cloud providers environment. The biggest pro of using serverless functions is that when the OS goes away, so does the need to harden and patch the OS. All that time and effort that you used to spend securing the underlying server, you get it back. Well, most of it. You don't get a free pass. The responsibility simply shifts. Instead of securing the OS, you're now responsible for securing the cloud infrastructure itself, ideally through automation. And this is where cloud security posture management, or CSPM, comes in. API security and serverless security go hand in hand. Serverless functions often act as the backend for APIs. This means that strong API security is crucial for your serverless function security. We're talking…

Contents