Aws-iam

February 15, 2020

A Least-Privilege IAM Strategy for Serverless Framework Deployments

serverlessaws-iamaws-lambda

Two practical patterns for scoping down the IAM permissions used by the Serverless Framework CLI when deploying - bottom-up gradual scoping, and the top-down 'dedicated deployer' pattern using a dev account as a permission discovery sandbox.

February 15, 2020

Serverless Testing Strategy: Test Integrations and IAM Surface

serverlessaws-lambdaaws-iam

Most serverless bugs don't live in your code - they live at integration points and in IAM config. Here's why unit tests miss them and what to test instead.