Learning Serverless Security

Chapter 2. Understanding Serverless Architectures and Implementation Patterns

A Note for Early Release Readers

With Early Release ebooks, you get books in their earliest form—the author’s raw and unedited content as they write—so you can take advantage of these technologies long before the official release of these titles. This will be the 2nd chapter of the final book. Please note that the GitHub repo will be made active later on. If you have comments about how we might improve the content and/or examples in this book, or if you notice missing material within this chapter, please reach out to the editor at [e-mail].

In the previous chapter, I demystified serverless computing and addressed the different myths and misconceptions associated with it. Next, you’ll dive deep into the serverless security risks and threats, but before doing so you need to have a solid understanding of how serverless applications are designed and implemented. That said, in this chapter, you will learn about common implementation patterns, architectures, and strategies for building serverless applications in Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). Having a good familiarity of these implementation patterns is critical when designing and implementing secure serverless applications in the cloud.

Note

There are several other cloud platforms on the market, and it would be impossible to cover all of them in one book. As such, I will focus on the top three most ...