Serverless TOP 10 Security Issues and Protection Patterns for AWS - 2023

Discover the top 10 security issues in serverless architecture and their protection patterns in this 39-minute video presentation. Explore OWASP-based research focusing on AWS serverless security for 2023. Gain insights into critical topics such as denial of wallet attacks, event injection in Lambda functions, misconfiguration and drift detection, weak access controls, and cloud misconfiguration issues. Delve into serverless application patterns for production, image recognition, and CI/CD environments. Learn about Node.js Event Loop for timing attacks, Lambda antipatterns and protection strategies, backdooring and exploiting AWS ECR, Lambda code/S3/DynamoDB dumping, offensive infrastructure as code, and Cloud Formation resource injection. Understand cloud drift detection and its importance in maintaining a secure serverless environment.