Developing Serverless Solutions on AWS

Day 3

Resources

The following resource links will provide more information and help reinforce topics covered during the Cloud Practitioner Essentials course:

Module 10: Serverless application security

• Serverless Applications Lens Best Practices
• OWASP Top Ten
• Security Overview of Amazon API Gateway Whitepaper
• Integrate a REST API with an Amazon Cognito user pool
• Working with AWS Lambda authorizers for HTTP APIs
• How API Gateway resource policies affect authorization workflow
• API Gateway resource policy examples
• Throttle API requests for better throughput
• Setting up data transformations for REST APIs
• Enabling CORS for a REST API resource
• Configuring CORS for an HTTP API
• Amazon API Gateway Testing CORS
• Security in AWS Lambda
• Security Overview of AWS Lambda
• Using resource-based policies for AWS Lambda
• AWS Lambda execution role
• Configuring interface VPC endpoints for Lambda
• Using IAM condition keys for VPC settings
• New – Code Signing, a Trust and Integrity Control for AWS Lambda
• IAM Policy to Allow an AWS Lambda Function to Access DynamoDB Stream Records
• S3 User policy examples
• Bucket policy examples
• AWS Systems Manager Parameter Store
• What Is AWS Secrets Manager?
• Building a serverless URL shortener app without AWS Lambda – part 1
• How do I authorize access to API Gateway APIs using custom scopes in Amazon Cognito?
• Use AWS WAF to Mitigate OWASP’s Top 10 Web Application Vulnerabilities
• AWS re:Inforce 2019: Securing Enterprise-Grade Serverless Applications
• AWS re:Inforce 2019 - Keynote with Steve Schmidt
• Security Engineering on AWS
• Serverless Security Workshop

Module 11: Handling scale in serverless applications

• Amazon API Gateway quotas and important notes
• Lambda quotas
• Amazon SQS quotas
• Kinesis Data Streams Quotas and Limits
• AWS Step Functions Quotas
• AWS re:Invent 2019: Scaling up to your first 10 million users
• Throttling requests to your HTTP API
• Throttle API requests for better throughput
• Creating and using usage plans with API keys
• Enabling API caching to enhance responsiveness
• Working with AWS service integrations for HTTP APIs
• Pricing Calculator - AWS Lambda
• AWS Lambda Power Tuning
• Amazon Kinesis Data Streams Terminology and Concepts
• Optimizing the cost of serverless web applications
• AWS re:Invent 2019: Serverless at scale: Design patterns and optimizations
• AWS re:Invent 2019: Scalable serverless event-driven applications using Amazon SQS & Lambda

Module 12: Automating the deployment pipeline

• Getting Started Developer Tools
• Tutorial: Deploy an updated Lambda function with CodeDeploy and the AWS Serverless Application Model
• Practicing Continuous Integration and Continuous Delivery on AWS Accelerating Software Delivery with DevOps
• Serverless CI/CD for the Enterprise on AWS
• AWS re:Invent 2019: CI/CD for serverless applications
• AppSpec 'hooks' section for an AWS Lambda deployment
• Deploying serverless applications gradually
• Implementing safe AWS Lambda deployments with AWS CodeDeploy
• Sessions With SAM (S1E7): Creating safe linear and canary deploys for Lambda functions
• Mastering the AWS Serverless Application Model (AWS SAM) - AWS Online Tech Talks
• Advanced Testing Practices using AWS DevOps Tools
• DevOps Engineering on AWS
• Advanced Developing on AWS
• CI/CD for Serverless Applications Workshop