Our serverless applications are more secure by default, since AWS has taken over the security of both the infrastructure as well as the operation system. Known vulnerabilities such as spectre and meltdown are patched without us having to lift a finger.

But there is still a large attack surface in our application code, and the OWASP top 10 list is as relevant as ever. Attacks such as SQL injection and cross-site scripting (XSS) can still plague us, and our dependencies can be compromised to steal sensitive data.

Join us in this session as we discuss many of the security risks that serverless teams still have to face, and some of the leading practices to make your serverless application more secure.