Serverless Security - New Risks Require New Approaches

This course covers the new risks and challenges in serverless security, emphasizing the need for new approaches in a serverless environment. The learning outcomes include understanding serverless architecture, identifying serverless risks, and implementing security measures such as traditional AppSec testing and DevSecOps practices. The course teaches about resource-based IAM, loss of perimeter, OWASP serverless top 10, and various security testing tools like SCA, IAST, SAST, and DAST. The teaching method involves a presentation with real-world examples and a demo. The intended audience includes developers, application security teams, and anyone interested in serverless security and cloud-native development.