Serverless Integration

Overview

FaaS (Function as a service) is the concept of serverless computing via serverless architectures. Developers can leverage this architecture to deploy an individual “function”, action, or a piece of business logic. Functions are expected to start within milliseconds and process individual requests and then end.

While there are a lot of benefits in serverless architecture, there are some new security threats as well. The attack surface is larger: more HTTP endpoints are exposed, there is a higher risk for configuration errors as the technology is brand new, and most security platforms are just not there yet. Serverless functions are exposed to open source vulnerabilities just like any other software, if not more. 

In modern architectures, where microservices are built as part of the SDLC pipeline, and being deployed as serverless functions, it is required to continuously scan and monitor these functions for security vulnerabilities and license compliance issues.

Mend for Serverless Environments

Mend serverless integration enables you to scan and monitor deployed FaaS. 

Utilizing the Unified Agent and Effective Usage Analysis technologies, Mend is capable of understanding the effective references from the serverless functions to the vulnerable code in the called open source components.

The following links are for serverless integration related topics:

• AWS Lambda Integration

• Serverless Framework Integration