Securing Northstar's billing platform, built entirely on AWS Lambda, where the function boundary is the only perimeter: eight tiles of the serverless security board each turn a risk into a stance — one shared role for forty functions split into one role per function, dynamodb:* cut to two actions on one table, eval replaced by validated input, floating versions pinned and scanned, a Stripe key moved from source into Secrets Manager, the caller taken from the token instead of the request body, a fifteen-minute timeout bounded with a concurrency cap, and cost spikes treated as alerts. At the centre, the invoice-create function's policy is tightened and a twentyfold invocation spike raises an alert in the same hour.

CY-MID-060Mid Level · Serverless Security

Serverless Security — The Serverless Security Board

A hands-on mid-level course that secures serverless functions and event-driven apps. Work the serverless security board - eight domains: Identity, Permissions, Code, Dependencies, Secrets, Events, Runtime, and Monitoring - applying least-privilege function roles, input trust, and event-source security across AWS Lambda and friends. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Give each function its own least-privilege identity and permissions.
Secure function code, dependencies, and secrets.
Trust event sources and inputs correctly in an event-driven design.
Harden the runtime and monitor serverless for abuse.

Price:৳8,000