Securing Serverless: Persistent Security for Ephemeral Environments

Aqua's report discusses the security challenges of serverless workloads and presents their solution that scans serverless function code for open-source vulnerabilities and embedded secrets, and analyzes function permissions to identify excessive or unused IAM privileges. The approach provides continuous, non-intrusive discovery and least-privilege recommendations to reduce the attack surface without requiring code modifications.