01 - Introduction & Threat Model
In-depth analysis of serverless security architecture, shared responsibility models, threat vectors, ephemeral context risks, and root causes of serverless vulnerabilities.
02 - Least Privilege IAM
Deep technical guide to IAM roles, permission boundaries, resource-based policies, condition keys, cross-account security, and Infrastructure-as-Code patterns.
03 - Event Injection & Sanitization
Comprehensive guide to event-driven attack vectors, deserialization flaws, injection vulnerabilities, schema validation, and multi-language secure code implementations.
04 - Secrets & Cold Start Hardening
Secure secret storage, memory caching across warm starts, cold start lifecycle optimization, environment variable security, and KMS customer managed keys.
05 - Runtime Security & Tools
Production-grade runtime protection, threat monitoring, Denial of Wallet (DoW) mitigation, SAST/DAST tooling configuration, and structured logging.
06 - Hands-On Lab
Complete, self-contained hands-on vulnerability lab featuring a vulnerable AWS SAM application, automated Python exploit script, step-by-step remediation, and verification tests.
07 - References
Comprehensive reference library for Serverless Security, including CVEs, OWASP frameworks, NIST standards, CIS benchmarks, and security tooling resources.
Overview
Comprehensive production guide for securing serverless applications, covering threat modeling, least privilege IAM, event injection, secrets management, runtime defenses, and hands-on labs across AWS Lambda, Azure Functions, and GCP Cloud Functions.