Enhancing Serverless Computing Security in Multi-Cloud Environments: Integrating Policy-as-Code, Automated Compliance, and Dynamic Access Controls

Authors: Charan Shankar Kummarapurugu

DOI: https://doi.org/10.5281/zenodo.14059454

Short DOI: https://doi.org/g8qjq5

Country: USA

Full-text Research PDF File:   View   |   Download

Abstract: Serverless computing has significantly transformed cloud infrastructure by enabling developers to build and deploy applications without the need to manage the underlying server infrastructure. However, adopting serverless architectures in multi-cloud environments introduces complex security challenges that traditional security models are often unable to address adequately. This paper proposes an integrated security approach to enhance serverless security within multi-cloud ecosystems. The approach leverages Policy-as-Code (PaC), automated compliance mechanisms, and dynamic access controls to ensure a robust and adaptable security posture. The proposed framework includes algorithms designed for dynamic policy enforcement and real- time compliance verification to secure transient and highly distributed serverless applications. Compared to conventional solutions, our approach demonstrates notable improvements in access control flexibility, compliance coverage, and threat mitigation effectiveness.

Keywords: Serverless Computing, Multi-Cloud Security, Policy-as-Code, Automated Compliance, Dynamic Access Con- trol, Zero Trust Architecture

Paper Id: 231475

Published On: 2022-04-05

Published In: Volume 10, Issue 2, March-April 2022

Share this