Deep Dive: Serverless Security (STAG Presentation)
summary
Updated CNCF STAG whitepaper documents concrete risks and defenses: examples include bypass API Gateway HTTP endpoints that sidestep built‑in auth, excessive function permissions leading to large blast radius, bespoke crypto‑miner malware and “denial of wallet” cost attacks. Practical controls are RBAC, CI/CD SCA/SBOM checks, structured single‑line logging plus unified cloud tagging to correlate CloudTrail and function traces, and treating observability as the primary forensic source so an end‑to‑end chain of custody can be reconstructed.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:30Introductions
- 1:33What is STAG
- 3:05Serverless Whitepaper
- 4:15Serverless Security
- 8:25Attack Surface
- 9:42Monitor
- 11:38Attack vectors
- 12:41Inspection
- 16:21Two Efforts
- 17:39Chain of Custody
related talks
57mServerless Security: Attack and Defense
24mServerless security: how to protect what you don't see?
18mA First Look at the Security of Serverless Applications
33mServerless Security: New Risks Require New Approaches
22mServerless Security 101: Everything you need to know
30mServerless Security Top 10
40mServerless Architecture Security Patterns for Securing the Unseen
30mSecurity in the Serverless Environment