How secure is serverless computing?
Summary
So you can expect the physical infrastructure wrapper components - data centre, network, servers and operating systems - to be secured.They can draw data from multiple sources, which could include for example cloud storage, IoT devices, or a variety of APIs and message queues.And because serverless applications operate amid a complex web of connections, it makes full security testing difficult before release into a real-world environment.Further, the complexity of serverless environments means that checking the dependencies of any external libraries and web resources for vulnerabilities is highly advisable.Functions tend to be relatively small pieces of code, making it easier to define exactly what it will and will not do, which helps reduce the attack surface.