Download Publication
Who it's for:
- application developers
- security professionals
- CISOs
- system and security administrators
- information system security officers
How to Design a Secure Serverless Architecture - Chinese Translation
Release Date: 02/07/2022
Working Group: Serverless
This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translated content falls outside of the CSA Research Lifecycle. For any questions and feedback, contact research@cloudsecurityalliance.org.
Like any solution, serverless computing brings with it a variety of cyber risks. This paper provides best practices and recommendations for securing serverless applications. It offers an extensive overview of the different threats, focusing on the application owner risks that serverless platforms are exposed to and suggesting the appropriate security controls.
Like any solution, serverless computing brings with it a variety of cyber risks. This paper provides best practices and recommendations for securing serverless applications. It offers an extensive overview of the different threats, focusing on the application owner risks that serverless platforms are exposed to and suggesting the appropriate security controls.
The document assumes that the readers have some knowledge of coding practices, security and networking expertise, and application containers, microservices, functions, and agile application development.
Key Takeaways:
- What is Serverless
- Advantages and benefits of serverless architecture
- Shared responsibility model for serverless
- Security design, controls and best practices
- Kubernetes security best practices
- CI-CD pipelines, Function Code, Code scans and policy enforcement for Functions and Containers
- Compliance and governance for serverless
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
Related Resources
Are you a research volunteer? Request to have your profile displayed on the website here.
Interested in helping develop research with CSA?
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more