Aws-iam
01
A Least-Privilege IAM Strategy for Serverless Framework Deployments
serverlessaws-iamaws-lambda
Two practical patterns for scoping down the IAM permissions used by the Serverless Framework CLI when deploying - bottom-up gradual scoping, and the top-down 'dedicated deployer' pattern using a dev account as a permission discovery sandbox.
02
Serverless Testing Strategy: Test Integrations and IAM Surface
serverlessaws-lambdaaws-iam
Most serverless bugs don't live in your code - they live at integration points and in IAM config. Here's why unit tests miss them and what to test instead.