Securing serverless/FaaS
Although the name implies that there are no servers, the term serverless means that you, as a customer of the service, are not responsible for the underlying compute infrastructure (operating system maintenance, scale, runtime management, and so on) – you simply import your code (according to the language supported by FaaS in each cloud provider), select your preferred runtime, select the amount of required memory per function (which affects the amount of CPU), and set the trigger to invoke the function.
In virtual machines (VMs), a customer deploys a guest OS on top of a managed hypervisor, and inside the OS, the customer deploys software (containing code, binaries, and libraries), and on top of it, different applications.
In containers, a customer deploys a container image on top of a container engine. The container image is a package of software (containing code, binaries, and libraries), and usually, each container is dedicated to a specific...
