Preventing exploitation of serverless-function flows

A computer-implemented method comprising:

• detecting, by a processor, a first request associated with a first serverless function in a predefined sequence of serverless functions;
• and
• in response to detecting the first request, causing, by the processor, a secondary container to be deployed in a cloud computing environment, the secondary container being configured to:
• intercept a second request transmitted from a primary container configured to execute the first serverless function, the second request being configured to invoke a second serverless function in the predefined sequence of serverless functions;
• generate a modified second request based on the second request;
• and
• transmit the modified second request to a destination other than an endpoint of the second serverless function, the destination being configured to cause the second serverless function to be executed in response to receiving the modified second request.

A non-transitory computer-readable medium comprising program code that is executable by a processor for causing the processor to perform operations including:

• detecting a first request associated with a first serverless function in a predefined sequence of serverless functions;
• and
• in response to detecting the first request, causing a secondary container to be deployed in a cloud computing environment, the secondary container being configured to:
• intercept a second request transmitted from a primary container configured to execute the first serverless function, the second request being configured to invoke a second serverless function in the predefined sequence of serverless functions;
• generate a modified second request based on the second request, wherein the modified second request includes an identifier usable to invoke the second serverless function;
• and
• transmit the modified second request to a destination other than an endpoint of the second serverless function, the destination being configured to cause the second serverless function to be executed in response to receiving the modified second request and based on the identifier.