Tag «security»

10 ways to secure your AWS Lambda function

1. Use fine-grained permissions for IAM execution role. An AWS Lambda function’s execution role grants permission to access AWS services and resources. You provide this role when you create a function, and Lambda assumes the role when your function is invoked. It defines what your function can do. Always allow only needed actions on required …

Cloudyna: Secrets management in serverless world

Materials from my recent lecture at Cloudyna conference in Katowice. Applications frequently need to authenticate to an external service or API. This authentication might include credentials that talk to a database or an API key to issue a third-party request.Serverless apps are frequently stateless and require a different than traditional approach. Should we inject credentials …