News for hackers. Stuff that matters.

A comment on Collection of best practices for providing and consuming webhooks. Parent comment

Re:Collection of best practices for providing and consuming ... by rajamaka on Friday August 19, 2022 @09:02AM (#32520449)
Outgoing webhooks dispatched from a Lambda seemed to solve most of the above problems for us
[ Parent | on HN ]
Re:Collection of best practices for providing and consuming ... by tasn on Friday August 19, 2022 @02:29PM (#32524496)
Using lambda doesn't protect you against any of these.

Timeout attacks: instead of failing you'll now be just be paying through the nose. And also with enough scale you can hit lambda limits and fail.

SSRF: you are still as vulnerable unless the lambda is outside your VPC (but then it's the VPC that solved it, not the lambda).

[ Parent | on HN ]