Securing Serverless Functions via Kubernetes Objects
Serverless is fast becoming a new application architecture paradigm. As glue code that links cloud services together it is tempting to forget about the security of functions being deployed. In this ta …
| Talk Title | Securing Serverless Functions via Kubernetes Objects |
| Speakers | Sebastien Goasguen (CTO, TriggerMesh) |
| Conference | KubeCon + CloudNativeCon Europe |
| Conf Tag | |
| Location | Copenhagen, Denmark |
| Date | Apr 30-May 4, 2018 |
| URL | Talk Page |
| Slides | Talk Slides |
| Video | |
Serverless is fast becoming a new application architecture paradigm. As glue code that links cloud services together it is tempting to forget about the security of functions being deployed. In this talk we will discuss the very important security considerations that we still need to keep in mind with serverless functions. Using kubeless, the kubernetes native serverless solution and focusing on AWS EKS deployment we will discuss how Pod identity, Pod security context, Network Policies, AWS IAM profiles and API gateways can all be used in concert to create a secure serverless application. Demonstrations will highlight how Kubernetes brings critical value-add to a serverless solution and will re-inforce the need for a strong security mindset for cloud-native applications.
