NEW: The State of AWS Security 2026 - Free WhitepaperFree AWS Security Whitepaper

OWASP

4 items across 2 sections

Blog Posts3

Serverless Doesn't Mean Secure: The State of AWS Lambda Security in 2026

Part 1 of 4 in the Lambda Security Series. Why "managed" doesn't mean secure: overprivileged execution roles, secrets in environment variables, public function URLs, deprecated runtimes, and event-data injection.

9 min read · 2026-05-25

The Code Is Still Yours: Application-Layer Security for AWS Lambda

Part 4 of 4 in the Lambda Security Series. The half no posture scanner reaches: event-data injection, stealable execution-role credentials, insecure deserialization, dependency and code scanning, runtime secrets, and detection.

15 min read · 2026-06-09

The Hidden Backbone of the Internet: Why S3 Security Should Keep You Up at Night

Part 1 of the S3 Security Series. Explore the major S3 data breaches of the past decade and why Amazon S3 security matters more than most people realize.

15 min read · 2026-01-15

Best Practices1

AWS WAF Security Best Practices

Comprehensive guide to securing web applications with AWS WAF. Covers managed rules, Bot Control, Fraud Control (ATP/ACFP), CAPTCHA/Challenge actions, rate-based rules, Shield Advanced integration, and centralized WAF management with Firewall Manager.

15 min read

Need Help with AWS Security?

Our AWS security experts can help you implement best practices across all these topics.