Uploaded April 2019 | Updated September 2026, 1 week ago
Serverless architectures are a fantastic solution to a lot—not all—design challenge. The benefits they bring are substantial and they can reduce the overall ops and development burden for a lot of teams.
But when we're talking about serverless, are we all talking about the same thing?
I see three distinct definitions of the term "serverless" in use everyday. The challenge is when it comes to security, you better be looking at the entire architecture and not just one piece of the puzzle.
We're well past the days where security is siloed. Serverless presents a fantastic opportunity to move security forward by treating these solutions like the distributed systems they are.
Reference:
- Dr. Vogel's keynote from the 2019 AWS Summits, youtube.com/watch?v=vWfkbGF6fiA
Serverless architectures are a fantastic solution to a lot—not all—design challenge. The benefits they bring are substantial and they can reduce the overall ops and development burden for a lot of teams.
But when we're talking about serverless, are we all talking about the same thing?
I see three distinct definitions of the term "serverless" in use everyday. The challenge is when it comes to security, you better be looking at the entire architecture and not just one piece of the puzzle.
We're well past the days where security is siloed. Serverless presents a fantastic opportunity to move security forward by treating these solutions like the distributed systems they are.
Reference:
- Dr. Vogel's keynote from the 2019 AWS Summits, youtube.com/watch?v=vWfkbGF6fiA
![Twitter Shows Slow MFA Adoption, Is Security Unusable? #shorts
Multi-factor authentication (MFA or 2FA) is a fantastic security control. It makes it a lot harder for attackers to gain access to your accounts.
So why isnt it used more? Lets explore in this short...
References:
- Twitter Transparency Report, https://transparency.twitter.com/en/reports/account-security.html#2020-jul-dec
- Coverage of the report by Bleeping Computer, Twitter reveals surprisingly low two-factor auth (2FA) adoption rate
https://www.bleepingcomputer.com/news/security/twitter-reveals-surprisingly-low-two-factor-auth-2fa-adoption-rate/
- Excellent discussion thread from Rachel Tobac, https://twitter.com/RachelTobac/status/1417984118810238976
Index:
- [0:00] MFA?
- [0:17] Twitters uptake data
- [0:31] Two problems
#shorts Twitter Shows Slow MFA Adoption, Is Security Unusable? #shorts](https://i.ytimg.com/vi/hRWtPkmLVm4/mqdefault.jpg)
![Can We Improve How CorpInfo handled IoT Events in 2017? (Reaction)
In late 2017, CorpInfo did an AWS This is My Architecture video. The video walks through how they handled a massive amount of events coming from various IoT devices they had deployed. Remember, this was before any of the AWS IoT-specific services!
Now, a few years later, I react to that video and see whats stood the test of time, what could be done simpler given todays technology, and generally critique the design against the AWS Well-Architected Framework in a mini AWS Well-Architected Review.
The original video: https://youtu.be/s9y_TeEfs10
More on the AWS Well-Architected Framework is at https://aws.amazon.com/architecture/w...
Follow me on Twitter at https://twitter.com/marknca
Read my AWS Hero bio at https://aws.amazon.com/developer/comm...
Learn more about the AWS Well-Architected Framework in my course on A Cloud Guru at https://markn.ca/courses/#mastering-t...
Index:
- [00:00] Intro
- [00:27] Introductions
- [01:15] Problem statement
- [03:43] Segmentation
- [05:21] Device events
- [08:19] Aligning to users
- [10:36] Tuning data for write
- [12:55] Can we improve? Can We Improve How CorpInfo handled IoT Events in 2017? (Reaction)](https://i.ytimg.com/vi/hTOtRrxEVuc/mqdefault.jpg)
![How To Pick A Serverless Database For Your Project In 30 Minutes or Less
I want to make it easier to keep track of whats happening in the world of cloud computing. To do that, Im creating an automated tool to help gather all of the data that I need in my day-to-day research.
In this first step, Im making what is probably the most important architectural decision: the database powering everything.
I know I want a serverless design but how do I pick the best database for this project?
During this livestream, I walk through my thought process and share it with you.
Index
- [00:00] Hey!
- [03:05] Problem statement
- [07:10] Google Cloud
- [12:24] Azure
- [17:39] AWS
- [28:30] Whats next? How To Pick A Serverless Database For Your Project In 30 Minutes or Less](https://i.ytimg.com/vi/hiTuasfMk8c/mqdefault.jpg)




![Stop Your Password From Opening The Door To Hackers
We deal with passwords constantly. Often times we are forced to follow seemingly absurd rules that are supposed to make things more secure, but we keep seeing breach after breach. And after those breaches, we need to pick new passwords!
In this video, well explore why passwords are hard to manage, what cybersecurity myths are holding us back, how hackers attack passwords, and how to make passwords that are actually strong and usable at the same time!
Index:
- [00:00] Intro
- [00:21] Password Math
- [01:11] Memory Failures
- [02:07] Hackers
- [03:53] Using Our Advantage
- [05:13] Holding Us Back
- [05:59] 2FA & MFA
- [06:39] Too Many Passwords
- [08:18] Putting It All Together Stop Your Password From Opening The Door To Hackers](https://i.ytimg.com/vi/iKSuO2hn5oo/mqdefault.jpg)


