Resources for SVS302: Architecting secure serverless applications
Security overview of Amazon API Gateway
White paper
This free whitepaper approaches the Amazon API Gateway service through a security lens.
Serverless Security Workshop
Workshop
In this workshop, you will learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora. We will cover AWS services and features you can leverage to improve the security of a serverless applications across five domains.
Securely retrieving secrets with AWS Lambda
Blog post
AWS Lambda functions often need to access secrets, such as certificates, API keys, or database passwords. This post describes approaches to managing and retrieving those secrets when working with AWS Lambda.
Permission boundaries example
Sample code
A sample IAM permissions boundary as a starting point for creating your own permissions boundary to meet the security needs of your organization.
AWS Lambda Powertools for Python
Adopt best practices
A suite of utilities for AWS Lambda functions to ease adopting best practices such as tracing, structured logging, custom metrics, idempotency, batching, and more.
Presented by:
Security overview of AWS Lambda
White paper
This free whitepaper approaches the AWS Lambda service through a security lens. It discusses cloud security best practices and provides a detailed look into the underpinnings of AWS Lambda for developers, security analysts, compliance teams, and other stakeholders.