Serverless Security
What is Serverless Security?
The security practices and considerations specific to serverless computing architectures (Functions as a Service). Serverless security focuses on function permissions, input validation, dependency management, and event injection prevention.
Terms that appear alongside serverless security
Each of these is named in at least one of the same controls as serverless security. The number is how many controls name both.
- cloud infrastructure security 5 shared controls
- infrastructure security 5 shared controls
- container security 3 shared controls
- cloud workload protection 3 shared controls
- security posture 3 shared controls
- remediation 2 shared controls
- vulnerability 2 shared controls
- software bill of materials 2 shared controls
Frameworks that govern serverless security
What the standards actually require on serverless security
Requirements naming serverless security across 3 standards, quoted from the control text.
ISMAP Cloud Infrastructure controls cover the underlying compute + network + storage + management plane. (1) Virtual Network Segmentation: VPC Virtual Private Cloud isolation + subnets + security groups + NACLs + microsegmentation + service mesh (Istio + Linke...
ISMAP-CloudInfrastructure-NetworkSegmentation-Container-Serverless-WorkloadProtection-Hardening-ConfigManagement · ISMAP Cloud Infrastructure - VPC Network Segmentation + Container/Serverless Security + Cloud Workload Protection (CWPP) + Image/Template Hardening + CIS Benchmarks + Configuration Management + IaC →Container and serverless security. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Cloud Infrastructure Security.
NIST190-17 · Container and serverless security →Apply Section 7.5 cloud workload protection covering CWPP (Cloud Workload Protection Platform) + image and template hardening (golden image builds + AMI/VHD hardening + scanning) + container security (image scanning + admission control + runtime monitoring for...
NISTSP144-7 · Cloud Workload Protection, Containers, Serverless, and Configuration →Questions people ask about serverless security
What is Serverless Security?
Why is Serverless Security important for compliance?
Which compliance frameworks address Serverless Security?
Where can I learn more about Serverless Security?
See how Serverless Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.