Serverless Security

1. Front Matter

   Pages i-xvii

   PDF

2. Introduction to Cloud Computing Security

   • Miguel A. Calles

   Pages 1-13

3. Performing a Risk Assessment

   • Miguel A. Calles

   Pages 15-38

4. Securing the Code

   • Miguel A. Calles

   Pages 39-69

5. Securing Interfaces

   • Miguel A. Calles

   Pages 71-100

6. Configuring the Application Stack

   • Miguel A. Calles

   Pages 101-123

7. Restricting Permissions

   • Miguel A. Calles

   Pages 125-176

8. Account Management

   • Miguel A. Calles

   Pages 177-197

9. Secrets Management

   • Miguel A. Calles

   Pages 199-227

10. Authentication and Authorization

    • Miguel A. Calles

    Pages 229-256

11. Protecting Sensitive Data

    • Miguel A. Calles

    Pages 257-283

12. Monitoring, Auditing, and Alerting

    • Miguel A. Calles

    Pages 285-312

13. Additional Considerations

    • Miguel A. Calles

    Pages 313-319

14. Finalizing the Risk Assessment

    • Miguel A. Calles

    Pages 321-324

15. Back Matter

    Pages 325-347

    PDF

Apply the basics of security in serverless computing to new or existing projects. This hands-on guide provides practical examples and fundamentals. You will apply these fundamentals in all aspects of serverless computing: improving the code, securing the application, and protecting the infrastructure. You will come away having security knowledge that enables you to secure a project you are supporting and have technical conversations with cybersecurity personnel.

At a time when there are many news stories on cybersecurity breaches, it is crucial to think about security in your applications. It is tempting to believe that having a third-party host the entire computing platform will increase security. This book shows you why cybersecurity is the responsibility of everyone working on the project.

What You Will Learn

• Gain a deeper understanding of cybersecurity in serverless computing
• Know how to use free and open source tools (such as the Node Package Manager, ESLint, and VSCode) to reduce vulnerabilities in your application code
• Assess potential threats from event triggers in your serverless functions
• Understand security best practices in serverless computing
• Develop an agnostic security architecture while reducing risk from vendor-specific infrastructure

Who This Book Is For

Developers or security engineers looking to expand their current knowledge of traditional cybersecurity into serverless computing projects. Individuals just beginning in serverless computing and cybersecurity can apply the concepts in this book in their projects.

• Serverless
• Serverless computing
• Lambda
• Cloud computing
• Function as a Service
• FaaS
• Cybersecurity
• Security
• Serverless security
• Serverless cybersecurity
• npm
• eslint

• La Habra, USA

  Miguel A. Calles

Miguel Calles is a freelance cybersecurity content writer. He has an information assurance certification, and works as an engineer on a serverless project. He started in cybersecurity in 2016 for a US government contract, and has been doing technical writing since 2007, and has worked in various engineering roles since 2004. Miguel started his interest in cybersecurity when he was in middle school and was trying to backward engineer websites.

Policies and ethics