@DanielToh wrote:
Can we deploy segmentation policies for Server-less applications in AWS?
I understand that there is an agent-less option using the cloud connector, which uses the AWS native Security Groups to enable segmentation in the VPC, does this work for server-less applications as well. ?
Thanks
You can apply some network segmentation to serverless applications in AWS, but it's not the same as with EC2 instances. The agentless cloud connector, which uses Security Groups, is not a direct solution because serverless functions like AWS Lambda don't have persistent network interfaces. Instead, you can achieve segmentation by controlling access at the application and identity layer using other AWS native services. This includes configuring your functions to only access specific resources like VPC endpoints or S3 buckets and using AWS IAM policies to restrict what actions they can perform. This provides a similar level of security but through different means.
