Securing application behavior in serverless computing
AssigneeTwistlock, Ltd.
InventorsOry Segal, Yuri Shapira, Avraham Shulman, Benny Nissimov, Shaked Zin
Life of this patent
Estimating the term…
Abstract
A method for securing a serverless application including: (a) receiving a list of components which make up the serverless application and one or more intended usage flows of the serverless application; (b) creating and applying a security policy for each component of the serverless application, the security policy denying all access requests except from authorized components, wherein the authorized components are selected based on access requirements dictated by the one or more intended usage flows.
Claims22
A method comprising:
- determining components of a serverless application and an intended order of access among the components of the serverless application based, at least in part, on scanning files of the serverless application;
- creating security policies for the components of the serverless application, wherein the security policies are created to restrict access among the components according to the intended order of access;
- and
- deploying the security policies to secure the serverless application.
A non-transitory, machine-readable medium having program code stored thereon, the program code comprising instructions to:
- determine components of a serverless application and an intended order of access among the components of the serverless application based, at least in part, on scanning files of the serverless application;
- create security policies for the components of the serverless application, wherein the security policies are created to restrict access among the components according to the intended order of access;
- and
- deploy the security policies to secure the serverless application.
An apparatus comprising:
- a processor;
- and
- a machine-readable medium having instructions stored thereon that are executable by the processor to cause the apparatus to,
- determine components of a serverless application and an intended order of access among the components of the serverless application based, at least in part, on scanning files of the serverless application;
- create security policies for the components of the serverless application, wherein the security policies are created to restrict access among the components according to the intended order of access;
- and
- deploy the security policies to secure the serverless application.
Dependencies are inferred from the claim text.