In this section, we are going to talk about the security required to build your first microservice. Specifically, we are going to look at the security around Lambda functions, API Gateway, and DynamoDB, and then we are going to discuss the ways you can use monitoring and alerting upon detecting suspicious events.
Securing your serverless microservice
Lambda security
In lambda security, there are two types of IAM roles:
- Invoking the lambda: This means having the permissions to actually invoke and run a lambda function. For example, this could be from an API Gateway or another service.
- Granting lambda function read and write access to specific AWS resources: For example, you would allow a Lambda function to read from a DynamoDB...
