Re:XML Is the Future
by RadiozRadioz on Sunday June 25, 2023 @03:24PM
(#36471699)
> ssh login, fail2ban, opened ports, unprivileged user
All of these things are extremely trivial to configure.
> Would you feel more or less confortable taking vacations while having a server or a server less platform?
Depends on the SLA of my provider. Most VPS providers have 3+9s these days, then the reliability concern becomes my code, same with serverless.
> Would you feel more or less confortable undergoing a security assessment while using a server or a server less platform?
It is a common misconception that serverless platforms are inherently more secure. In reality, they just have different security concerns. In my eyes, it takes a practitioner of equivalent skill to properly harden a fleet of servers Vs correctly handle the eccentricities of IAM et al in a large cloud app.
- scale to zero, or scale to one (no cold starts) - not having to manage disk space - not having to manage quite a bit of security (ssh login, fail2ban, opened ports, unprivileged user) - in some cases, out of the box - or easier - deploy pipeline
Would you feel more or less confortable taking vacations while having a server or a server less platform?
Would you feel more or less confortable undergoing a security assessment while using a server or a server less platform?
I quite agree with what you say but can't deny there are lots of non negligible advantages.