AWS Lambda is the ultimate pay-as-you-go cloud computing service. Customers just need to upload their Lambda function code to the cloud and it will be up and running with no underlying infrastructure to secure or patch. However, according to AWS's Shared Responsibility model, you're still responsible for securing your Lambda function's code. This chapter is dedicated to the best practices and recommendations one can follow in AWS Lambda to make applications resilient and secure according to the AWS Well-Architected Framework. We will cover the following topics in this chapter:
- Authentication and user control access
- Encrypted environment variables
- Logging AWS Lambda API calls with CloudTrail
- Vulnerability scanning for your dependencies
