In this chapter, we looked at best practices for securing a Serverless app. We also looked at the security model recommended by AWS, and the basic constructs provided for securing accesses and infrastructure resources in an AWS account. We also underwent a practical walkthrough of securing the application that we created by launching resources in a VPC and encrypting the environment variables supplied to Lambda. This chapter can be treated as a primer in securing the Serverless system and its components on AWS. Security is ever-changing, and it is recommended that the reader keeps abreast of the different innovations that happen in this field.
Summary
Get Hands-On Serverless Applications with Kotlin now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
