Lambda

AWS Lambda enables serverless execution, with risks including excessive permissions, insecure integrations, and lack of visibility.

Lambda runs code in response to events. Risks stem from overly broad roles, insecure triggers, and hidden execution paths. Proper permission scoping and monitoring are required.

Lambda Documentation

Lambda Functions Without Logs
moderate
aws lambda

Lambda Functions Without Logs

AWS Lambda Functions without Logs
Lambda Functions with Update Problems
high
aws lambda

Lambda Functions with Update Problems

AWS Lambda can encounter failure states when attemping an update. When an update fails the service falls back to the previous iteration of the code potentially leading to outdated application …
Lambda Functions Running Depreciated Runtimes
moderate
aws lambda

Lambda Functions Running Depreciated Runtimes

Running depreciated AWS Lambda runtimes incurs both security and operational risks as well as upgrade risk should the service owner force an update to the runtime
Lambda Functions in Problem State
high
aws lambda

Lambda Functions in Problem State

AWS Lambda can encounter failure states when attemping execution of code. When invocations of the function fail the reason will be provided by the AWS Lambda Service for remediation