Best practices for data protection in FaaS
Functions can be used internally inside a customer’s environment (for example, as part of event-driven architecture between other components such as APIs) or for serving external customers, which requires network access protection.
Here are the high-level best practices for securing network access in FaaS:
- Protect access to internal functions using network access control lists to limit the access to functions or the access to other cloud resources by the function
- Implement a zero-trust model where every access request is authenticated, authorized, and encrypted, regardless of the source
- Use network segmentation to isolate different parts of your network, reducing the risk of lateral movement in case of a breach
- Use private endpoints to connect functions to other cloud services securely, avoiding exposure to the public internet
- Protect access to publicly exposed functions using API gateways, which adds authentication...
