Serverless still has an attack surface
A function that runs for two hundred milliseconds can still be injected into, over-permissioned and used to reach everything its role allows.
The short lifetime limits persistence, not impact. Event sources become inputs, so a message queue or a storage trigger is now an untrusted entry point. The model changes which risks apply; it does not produce an application with no risks.
More on Cloud resilience
- Multi-region is not the same as multi-providerTwo towns, one mains
- Autoscaling can scale a failure tooIt copied the mistake
- Managed services move responsibility, not all riskThe van takes the machines
- Private networking does not automatically mean trustedNobody asks twice
- Egress is part of the cloud security boundaryWatch the loading bay
- Snapshots can copy sensitive data silentlyThe copy keeps nothing