> ssh login, fail2ban, opened ports, unprivileged user
All of these things are extremely trivial to configure.
> Would you feel more or less confortable taking vacations while having a server or a server less platform?
Depends on the SLA of my provider. Most VPS providers have 3+9s these days, then the reliability concern becomes my code, same with serverless.
> Would you feel more or less confortable undergoing a security assessment while using a server or a server less platform?
It is a common misconception that serverless platforms are inherently more secure. In reality, they just have different security concerns. In my eyes, it takes a practitioner of equivalent skill to properly harden a fleet of servers Vs correctly handle the eccentricities of IAM et al in a large cloud app.
All of these things are extremely trivial to configure.
> Would you feel more or less confortable taking vacations while having a server or a server less platform?
Depends on the SLA of my provider. Most VPS providers have 3+9s these days, then the reliability concern becomes my code, same with serverless.
> Would you feel more or less confortable undergoing a security assessment while using a server or a server less platform?
It is a common misconception that serverless platforms are inherently more secure. In reality, they just have different security concerns. In my eyes, it takes a practitioner of equivalent skill to properly harden a fleet of servers Vs correctly handle the eccentricities of IAM et al in a large cloud app.