Security lessons learned from building serverless systems
Jalem Raj Rohit (~Dawny33) |
Serverless systems are systems where servers need not be running and being maintained round the clock. The paradigm uses functions and the concept of containerization to spawn on-demand light-weight containers for executing a task, and safely destroying the server when the task is completed.
As this is a new domain, the practices and concepts of ensuring security and doing the logging and monitoring, are still mostly difficult and not-fully-solved problems.
This talk stresses upon the security part of serverless systems explaining the lessons learned and pitfalls experienced from building distributed, serverless systems.
[Will be using AWS-specific examples whenever a tool-related point arises. But, that should fairly generalize to other cloud providers too.]
Raj works as a Senior Data Scientist.
His job includes building ML algorithms, architecting data pipelines, making systems 1% more intelligent, staring at endless Linux logs and building the devops team.
Raj is the author of the Julialang cookbook, and is also moderates the DevOps site of StackOverflow