puresec / Awesome Serverless Security
Licence: other
A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
Stars: ✭ 347
Projects that are alternatives of or similar to Awesome Serverless Security
Serverless Architectures Aws
The code repository for the Serverless Architectures on AWS book
Stars: ✭ 120 (-65.42%)
Mutual labels: aws-lambda, serverless-applications, serverless-architectures
Guide
Serverless Guide - An open-source definitive guide to serverless architectures.
Stars: ✭ 421 (+21.33%)
Mutual labels: aws-lambda, serverless-applications, serverless-architectures
Jazz
Platform to develop and manage serverless applications at an enterprise scale!
Stars: ✭ 254 (-26.8%)
Mutual labels: aws-lambda, serverless-applications, serverless-architectures
Webiny Js
Enterprise open-source serverless CMS. Includes a headless CMS, page builder, form builder and file manager. Easy to customize and expand. Deploys to AWS.
Stars: ✭ 4,869 (+1303.17%)
Mutual labels: aws-lambda, serverless-applications, serverless-architectures
Awesome Serverless
DEPRECATED: Curated list of resources related to serverless computing and serverless architectures.
Stars: ✭ 2,049 (+490.49%)
Mutual labels: serverless-applications, serverless-architectures
Syncano Node
Syncano Toolkit for JavaScript development
Stars: ✭ 61 (-82.42%)
Mutual labels: serverless-applications, serverless-architectures
Serverless Express
Run Node.js web applications and APIs using existing application frameworks on AWS #serverless technologies such as Lambda, API Gateway, Lambda@Edge, and ALB.
Stars: ✭ 4,265 (+1129.11%)
Mutual labels: aws-lambda, serverless-applications
Moonmail
Email marketing platform for bulk emailing via Amazon SES (Google Cloud Platform and Azure coming soon)
Stars: ✭ 1,766 (+408.93%)
Mutual labels: serverless-applications, serverless-architectures
Aws Serverless Auth Reference App
Serverless reference app and backend API, showcasing authentication and authorization patterns using Amazon Cognito, Amazon API Gateway, AWS Lambda, and AWS IAM.
Stars: ✭ 724 (+108.65%)
Mutual labels: aws-lambda, serverless-architectures
Serverless Aws Lambda Node Postgres
Serverless AWS Lambda with Node.js,Postgres Rest API with Sequelize.
Stars: ✭ 18 (-94.81%)
Mutual labels: aws-lambda, serverless-architectures
Brain Power Amazon Fidgetology
Serverless web app for streaming browser webcam feed to Amazon Kinesis Video Streams and Rekognition Video. See our post on the AWS Machine Learning Blog: https://aws.amazon.com/blogs/machine-learning/building-automatic-analysis-of-body-language-to-gauge-attention-and-engagement-using-amazon-kinesis-video-streams-and-amazon-ai-services
Stars: ✭ 84 (-75.79%)
Mutual labels: aws-lambda, serverless-applications
Serverless
⚡ Serverless Framework – Build web, mobile and IoT applications with serverless architectures using AWS Lambda, Azure Functions, Google CloudFunctions & more! –
Stars: ✭ 41,584 (+11883.86%)
Mutual labels: aws-lambda, serverless-architectures
Lambda Api
Lightweight web framework for your serverless applications
Stars: ✭ 929 (+167.72%)
Mutual labels: aws-lambda, serverless-applications
serverless-react-server-side-render
A Demo of Serverless Framework with React Server Side Render
Stars: ✭ 20 (-94.24%)
Mutual labels: aws-lambda, serverless-architectures
redis-examples
Sample applications implemented with serverless Redis
Stars: ✭ 44 (-87.32%)
Mutual labels: aws-lambda, serverless-applications
Terraform Aws Notify Slack
Terraform module which creates SNS topic and Lambda function which sends notifications to Slack
Stars: ✭ 290 (-16.43%)
Mutual labels: aws-lambda
Hands On Serverless Guide
A hands-on guide for building Serverless applications
Stars: ✭ 288 (-17%)
Mutual labels: aws-lambda
Serverless Plugin Canary Deployments
Canary deployments for your Serverless application
Stars: ✭ 283 (-18.44%)
Mutual labels: aws-lambda
Serverless Photo Recognition
A collection of 3 lambda functions that are invoked by Amazon S3 or Amazon API Gateway to analyze uploaded images with Amazon Rekognition and save picture labels to ElasticSearch (written in Kotlin)
Stars: ✭ 345 (-0.58%)
Mutual labels: aws-lambda
🔒 awesome-serverless-security
A curated list of awesome serverless security resources such as (e)books, articles, whitepapers, blogs and research papers.
Contents
- AWS Lambda Security
- Security Tools / Solutions
- Azure Functions Security
- Google Cloud Functions Security
- Serverless Risks / General
- Vulnerabilities, Weaknesses, CVEs
- General Application Security Articles, Books
- AWS Lambda (General)
- Other Interesting Articles / Web Pages
AWS Lambda Security
- AWS Lambda Security Best-Practices eBook - PDF eBook covering all the basics such as: Serverless Top 10, IAM roles & permissions, CloudTrail, AWS Config, API Gateway security.
- Foundations of AWS Lambda Security - Webinar recording covering AWS Lambda security basics, IAM permissions, Scalability, Governance.
- AWS Lambda Security Quick-Start Guide - A quick start guide portraying security strategies for AWS Lambda applications.
- AWS Lambda Security - Design for Failure - Notes on the importance of IAM permissions for AWS Lambda.
- Attacking an AWS Account via a Lambda Function - An article from DarkReading, describing attackers and defenders side of a real serverless bounty hunt.
- Minimizing the attack surface in Serverless - Presentation covering the basics of serverless attack surfaces.
- Gone in 60 milliseconds: Offensive security in the serverless age - A presentation video showing attack vectors using cloud event sources, exploitabilities in common serverless patterns and frameworks.
- Security Best Practices for Serverless Applications - Basic best-practices for AWS Lambda.
- AWS IAM best practices - Early AWS materials on IAM best practices.
- The Many-Faced Threats to the Serverless World - An article covering most of the basic security risks.
- How to Encrypt Serverless Environment Variable Secrets with KMS - Fundamentals of secrets handling with AWS KMS.
- Sharing Secrets with AWS Lambda Using AWS Systems Manager Parameter Store - How to use parameter store for secrets.
- A Serverless Journey: AWS Lambda under the hood - Great talk on how Lambda works, introduction to Firecracker.
- Security Considerations for AWS Lambda Runtime API and Layers - A blog post on what to keep in mind when developing with Layers & Runtime API.
- The FireCracker Virtual Machine Monitor - An analysis of AWS Firecracker.
- AWS Lambda Serverless Security Workshop - Learn techniques to secure a serverless application built with AWS Lambda, Amazon API Gateway and RDS Aurora (Re:Invent 2018 workshop).
Security Tools / Solutions
- PureSec Serverless Security Platform - The world's first and most advanced end-to-end serverless security platform.
- PureSec FunctionShield - A free AWS Lambda security and Google Cloud Functions library for developers.
- Automated SQL Injection Testing of Serverless Functions - An open source proxy for using SQLMap to test AWS Lambda, natively.
- Auto-Generate Least Privileged IAM Roles for AWS Lambda - A Serverless framework plugin for automatically generating least privileged roles using static analysis.
- OWASP ServerlessGoat - A vulnerable AWS Lambda serverless application.
- Secure Serverless CI/CD with Codeship, PureSec, and AWS Lambda - A step by step guide for secure serverless CI/CD.
Azure Functions Security
- Azure Functions & Serverless Platform Security - Some basics on Azure functions security.
- Run Your Azure Functions from a Package File - Deploying immutable Azure functions.
- Security in Azure App Service & Azure Functions - More basic concepts for Azure functions.
- Identity & Secure Resource Access in App Service & Azure Functions - Explores features in App Service or Azure functions which make working with identities simple (Build Conference).
- Secure Azure Functions with JWT access tokens - A blog post on how to use JWT access tokens with Azure functions.
Google Cloud Functions Security
- Function Identity - Documentation for Google Cloud Functions IAM and per-function identity.
Serverless Risks / General
- CSA: The 12 Most Critical Risks for Serverless Applications 2019 - The most extensive guide on the top risks for serverless applications (Cloud Security Alliance & PureSec).
- Securing serverless blog series - Blog series covering the main differences between security traditional applications and serverless.
- Securing Serverless: A Newbie's Guide - A terrific newbie's guide by Jeremy Daly.
- Serverless Security: What are we up against - A conference talk from ServerlessDays covering serverless security basics.
- Hacking Serverless Runtimes - Good early insights presentation from BlackHat conference 2017.
- Serverless Security and Things that Go Bump in the Night - QCon NYC presentation by Silvexis covering security basics for serverless.
- Securing Cloud via Serverless Design Patterns - Six serverless design patterns to build security services in the cloud.
- Peeking Behind the Curtains of Serverless Platforms - Provides insights into architectures, resource utilization, and the performance isolation efficiency of AWS Lambda, GCF and Azure Functions.
- Serverless Architectures - The best overview on serverless architectures. This article provides an in-depth look at serverless architectures.
Vulnerabilities, Weaknesses, CVEs
- ReDoS in NPM package aws-lambda-multipart-parser - A ReDoS in an NPM package for AWS Lambda functions.
- Apache OpenWhisk Action Mutability Weakness - Two vulnerabilities discovered in Apache OpenWhisk.
- Serverless Cypto-Mining - Exploiting app layer vulnerabilities in serverless functions to abuse AWS Lambda for crypto-mining.
General Application Security Articles, Books
- The Web Application Hacker’s Handbook - A classic book on web application security.
- Web Application Defender’s Cookbook - Another classic, covering ModSecurity protections.
- XSS (Cross Site Scripting) Attacks, Exploits & Defense - The XSS bible covering all aspects of XSS attacks and protections.
- Hacking Exposed - Web Applications - Another classic book on web application security.
- Securing DevOps - Tons of real world examples on DevOps and security.
AWS Lambda (General)
- Serverless Architectures on AWS - This book teaches you how to build, secure and manage serverless architectures.
- Tips & Tricks for logging and monitoring AWS Lambda Functions - Tips to help you get the most out of your logging and monitoring infrastructure for your functions .
Other Interesting Articles / Web Pages
- Google gVisor - GitHub repo for Google gVisor project.
- Google gVisor & Google Cloud Functions - A blog post covering Google gVisor and how it is used with Google Cloud Functions.
- IBM Cloud Functions - Platform Architecture - OpenWhisk & IBM Cloud Functions overview.
License
To the extent possible under law, PureSec has waived all copyright and related or neighboring rights to this work.
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].