Best practices for auditing and security monitoring in FaaS
Auditing is a crucial part of data protection. There are many aspects to review when talking about auditing and monitoring in FaaS, including the following, among others:
- Function activity logs, such as errors while running a function (for troubleshooting purposes)
- FaaS admin activity, such as an upload of a new version of code to a function
- FaaS access logs to other cloud resources, such as API activity that a function initiated to cloud resources
Adopt the following best practices for auditing and monitoring in FaaS:
- Although admin activity is automatically audited by the CSPs, its log history is limited. As a best practice, send all audit and monitoring logs to a central storage for further analysis and incident response and to comply with various regulations.
- Implement comprehensive logging and monitoring to detect and respond to suspicious activities. Use tools provided by your cloud...
