Improve productivity by shifting more responsibility to developers
Serverless office hours discussing and demoing serverless governance
video
In this video, you get an overview of why governance in depth is important for building and deploying serverless applications. The presenters in the video also do some hands-on demos of proactive controls, detective controls, and code signing with AWS Lambda.
Visualizing your findings
blog post
In this blog post, you learn how to interactively query AWS Config data with Amazon Athena and create dashboards with Amazon Quicksight.
Writing AWS CloudFormation Guard rules
documentation
This documentation shows how to write policy-as-code rules using the CloudFormation Guard domain-specific language (DSL).
Defining queries and filters
documentation
This documentation shows how to create queries of resources in your templates using CloudFormation Guard.
Validating input data against AWS CloudFormation Guard rules
documentation
This documentation shows how to validate templates against CloudFormation Guard rules.
Choosing scanning options for Lambda: standard scanning
documentation
This documentation shows what is covered with standard scanning, namely package vulnerabilities.
Choosing scanning options for Lambda: code scanning
documentation
This documentation shows what is covered with standard scanning, namely code vulnerabilities
Presented by:
Your starting place for serverless governance guidance
guide
Customers who build and deploy serverless, cloud-native applications must do so in a manner that both allows for agility and speed to market but also with appropriate governance and guardrails. This guide provides a practitioner’s view on implementing controls for developing and deploying AWS Lambda functions in your organization, both for the startup and the enterprise. Your organization may already have a pre-existing set of tools in place. We take a modular approach to these controls, so that you can pick and choose the components you actually need.