Developing and deploying secure AWS Lambda applications
summary
Contrast Security demonstrates an inside-out instrumentation approach that embeds into an AWS account, maps Lambda functions, S3 buckets and databases, and continuously scans for SQL/command injection and vulnerable open-source components. The platform identifies over-permissive functions, computes exact least-privilege rights and produces least-privilege IAM snippets to paste into the console. Setup takes “three clicks,” alerts on new CVEs, and the company reports hundreds of enterprise customers using the product.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:24Whats changed
- 3:12Secure Code Platform
- 4:00Log4J
- 5:29Why serverless
- 6:41Security considerations
- 8:39Over permissive functions
- 11:17Summary
- 13:30Conclusion
related talks
33mServerless Security: New Risks Require New Approaches
50mAutomated Serverless Security Testing: Delivering secure apps continuously
56mMore easily validate the components of the software you build
19mFrom code to insight: Amazon Inspector & AWS Lambda in action
30mServerless Security Top 10
40mServerless Architecture Security Patterns for Securing the Unseen
29mPragmatic Security Automation and DevSecOps in the Cloud
53mAchieving End-to-end Security on AWS