We have gone through all the security settings needed to ensure that our Lambda functions and our serverless architectures are secure. So, an engineer working on serverless systems should keep the following points in mind while designing their infrastructure from a security point of view:
- The VPC and the subnet settings can be added under the Network section of the Lambda function.
- It is recommended that the Lambda function is placed across at least two subnets for fault tolerance purposes. However, this is not compulsory.
- If you are placing your Lambda function inside a private subnet, you need to ensure that the private subnet is receiving the appropriate traffic from your public subnet(s) in that VPC. If not, then the Lambda function is essentially locked out.