Chapter 11, Securing Serverless Applications with Zappa

1. API Gateway authorizer is a mechanism to secure API resources. API Gateway authorizer generates an API Key that can bind with any resource. Once you bind the API resources then API Gateway will restrict any HTTP request with the API key in the x-api-key header.
2. AWS Lambda has a feature of Dead Letter Queue (DLQ), which enables developers to monitor the unknown failure. It can be configured against the AWS SNS or SQS as a DLQ in the AWS Lambda function. AWS Lambda will publish the failure event over the configured AWS SNS or SQS ARN.
3. AWS Virtual Private Cloud creates an isolated virtual network layer where you can configure all your AWS resources. AWS VPC will restrict the access from a outside the VPC network and enables the security layer.