NEW: The State of AWS Security 2026 - Free WhitepaperFree AWS Security Whitepaper

Lambda Security

4 items across 1 section

Blog Posts4

Serverless Doesn't Mean Secure: The State of AWS Lambda Security in 2026

Part 1 of 4 in the Lambda Security Series. Why "managed" doesn't mean secure: overprivileged execution roles, secrets in environment variables, public function URLs, deprecated runtimes, and event-data injection.

9 min read · 2026-05-25

Inside lambda-security-scanner: 19 Checks Across Every Function in Your Account

Part 2 of 4 in the Lambda Security Series. A deep look at lambda-security-scanner: 19 read-only checks across configuration, access control, network, logging, and supply chain, scored 0 to 100 and mapped to ten compliance frameworks.

12 min read · 2026-05-30

From Findings to Fixed: Lambda Compliance Mapping and Remediation

Part 3 of 4 in the Lambda Security Series. Map every Lambda security finding to ten compliance frameworks (PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, GDPR), then fix each of the 19 checks with a precise AWS CLI command.

11 min read · 2026-06-04

The Code Is Still Yours: Application-Layer Security for AWS Lambda

Part 4 of 4 in the Lambda Security Series. The half no posture scanner reaches: event-data injection, stealable execution-role credentials, insecure deserialization, dependency and code scanning, runtime secrets, and detection.

15 min read · 2026-06-09

Need Help with AWS Security?

Our AWS security experts can help you implement best practices across all these topics.