A real World example of using storage-first serverless solutions for increased resilience, with example code using TypeScript and the AWS CDK with both Amazon EventBridge and Step Function Express Workflows. —

Part 1 — Examples of authorisation in serverless solutions alongside both machine to machine and user authentication, using Cognito, Lambda Authorizers, Middy & Lambda Layers; with examples and code repo written in the AWS CDK and TypeScript. —

Example of building our serverless solutions once and with extensibility so they can be consumed in different locales safely, written in the AWS CDK and Typescript. —

Example of further productionising our solution from Part 1, which uses API Gateway, EventBridge API Destinations, WAF and Cognito to onboard and integrate with external customers, focusing more on security, scalability and fault tolerance. Example written in the CDK and Typescript. —

Example of using API Gateway, EventBridge API Destinations and Cognito to onboard and integrate with external customers, including using API Keys and Usage Plans. Example written in the CDK and Typescript. In Part 2 we will productionise the solution looking at security, availability and scalability. —

How can we use Custom Resources on AWS to extend our deployment and resource options without any restrictions, including non-AWS services and seeding data, all within the same IaC? This article includes visuals and code examples written in TypeScript with the CDK. —

Advanced Serverless Threat Modelling with guest writer Marek Šottl, discussing attacks such as Lambda Injection and Black Infra as Code. — Introduction When discussing Serverless Threat Modelling, it is key to also get the objective view of Serverless security experts. For that very reason, I am delighted that Marek Šottl is covering more of the advanced attack vectors in this article! Marek is part of the AWS Community Builders programme, and AWS…

During Serverless Threat Modelling what are the most common threats I typically see, and how can you bake this into your future solution designs as standard? In Part 3 we will understand advanced Serverless security threats with an expert guest blogger! —

What is Serverless as an analogy with descriptions and visuals. —