Honestly, we cannot give you a definite answer. Securing your applications always depends on your application’s logic, which assets you want to secure, and how much time you are willing to invest.

CodeShield can help you by automatically finding security vulnerabilities in your Serverless application, showing which are actually exploitable and fixing them.

• checkout your GitHub repository
• analyze your CloudFormation/SAM files
• analyze the project’s source-code
• merge your infrastructure definitions and source-code into a common representation
• scan the common representation for OWASP Serverless Top 10 vulnerabilities, including vulnerable open-source dependencies, and cloud resource misconfigurations using cutting-edge static data-flow analysis

At CodeShield we strive to provide a tool developers love.

Unfortunately, security tools have always been a pain to use due to bad usability and understandability, high false positive rates and long scanning times. Moreover, only a few static analyses are ready for serverless applications. With CodeShield we aim to solve these issues and provide a tool that enables developers to painlessly visualize, understand, and fix security vulnerabilities.

From one's own experience we know that writing apps oftentimes leaves us with a bad gut feeling due to not knowing if everything was properly implemented securely. CodeShield aims to provide transparency and safety regarding the app's security, so you can sleep well at night again.