Serverless rocks the security boat. The fact we don’t need to manage servers or capacity rids us of certain security concerns, while the sheer number of functions and the security management they need raises others.

In this talk, we’ll experience these security concerns live. We’ll break into a vulnerable Serverless application and exploit multiple weaknesses, helping you better understand the mistakes you can make, their implications, and how you can avoid them.