This is the presentation the PureSec team gave at the Tikal Fullstack Radar Day, where they spoke about how PureSec runs their 100% serverless architecture.

1. DevOps In The
World Of Serverless

2. About Us
● 15 years of experience in cyber security in
software development and management
positions
● Leads PureSec’s engineering to build a brand
new product in the brand new Serverless world
● Works In PureSec since early days
● Develops intensively in Serverless architecture
for the last 2 years
● AWS certified and B.Sc in Computer Science

3. PureSec is 100% Serverless

5. Serverless Is The Future

6. 6
Serverless Architectures Adoption
• By far, the fastest growing cloud segment
• 21-46% of AWS clients utilize serverless. and growing*
* 1. Cloud Foundry Foundation 2018 report (46%) 2. RightScale 2018 state of the cloud report (21%) 3. SumoLogic State of Modern
Applications and DevSecOps in the Cloud 2018 (29%).

7. Serverless != FaaS

8. ‫״‬Serverless Is a State of Mind‫״‬
Ben Kehoe

9. HowTo DevOps in the Serverless
World?

10. PureSec - Security for Serverless
• Established in 2016
• Serverless security category designer
• First to market with SSP - Serverless Security
Platform
SERVERLESS SECURITY PIONEER RECOGNIZED THOUGHT
LEADER
Cybersecurity veterans and thought leaders
SUPERSTAR TEAM

11. Controls the perimeter of
each function in order to
prevent malicious input
from entering
Controls function behavior in
order to ensure it works as
intended
Code & configuration
analysis to detect &
mitigate misconfigurations
and known vulnerabilities
During CI/CD When Invoked
Deep Visibility
During Execution
Static Analysis Serverless App Firewall Behavioral Protection
Security Posture Management

12. 100% SERVERLESS

13. Limited list of AWS serverless managed services
Not Only Functions
● Serverless ≠ FaaS (Function as a Service)
● Servicefull applications that stitch together additional resources
AWS FargateAWS Lambda DynamoDB Amazon Aurora
Serverless
API Gateway Simple
Queue Service
Step FunctionsAppSync

14. A Serverless Application

15. A New Approach to DevOps

16. IaC is part of the application

17. Infrastructure As Code
● Manage technology stack through
software
● Saved in version control system
● Developers become more involved
in defining configuration
● Ops teams get involved earlier in the
development process
AWS
CloudFormation

18. Infrastructure As Code

19. IaC Frameworks For Serverless

20. PureSec Pure IaC
● We use services which are not managed by the cloud provider
● For example, Auth0 as a User Identity service

21. Pure IaC

22. Fully automated deployments
● Testing environment = production environment
● Every developer can work on his own environment
● Disaster recovery

23. Going Beyond Cloud Provider Resources
● AWS CloudFormation Custom resources
● Custom provisioning logic
● You are responsible for the resource lifecycle

24. Lambda-backed Custom Resource
DEPLOY
INTERACTIONS
CODE
CODE
REPOSITORY
Lambda-backed
Custom Resources
More about custom resources

25. Summary
● Serverless is here to stay
● DevOps world is going to be changed
● You need to be prepared

26. We are hiring!
● Are you living and breathing cloud
computing & cyber security?
● Do you share our belief that Serverless is
the future of cloud computing?
● careers@puresec.io